Buffer over-read in Open vSwitch - CVE-2018-17206

Vulnerability identifier: #VU16580

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-17206

CWE-ID: CWE-126

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to buffer over-read issue during BUNDLE action decoding in the decode_bundle function inside lib/ofp-actions.c. A remote attacker can trigger memory corruption and cause the service to crash.

Open vSwitch
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization Manager
Red Hat Enterprise Linux Fast Datapath
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Fedora
Opensuse
openvswitch

Install update from vendor's website.

openvswitch - update to 2.10.0-1.fc29

• https://github.com/openvswitch/ovs/commit/9237a63c47bd314b807cda0bd2216264e82edbe8

• OpenSUSE Linux update for openvswitch
• Red Hat update for openvswitch
• Red Hat update for openvswitch
• Red Hat update for openvswitch
• Fedora 29 update for openvswitch