Out-of-bounds read in Open vSwitch - CVE-2017-9264
Published: May 29, 2017 / Updated: December 21, 2022
Vulnerability identifier: #VU38936
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-9264
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely. A remote attacker can perform a denial of service attack.
Affected software
Open vSwitch
Red Hat Virtualization
Red Hat Enterprise Linux Fast Datapath
Fedora
openvswitch (Red Hat package)
openvswitch
Red Hat OpenStack
Red Hat Virtualization
Red Hat Enterprise Linux Fast Datapath
Fedora
openvswitch (Red Hat package)
openvswitch
Red Hat OpenStack
How to mitigate CVE-2017-9264
Install update from vendor's website.
openvswitch (Red Hat package) - addressed in versions 2.6.1-13.git20161206.el7ost, 2.7.2-1.git20170719.el7fdp
openvswitch - update to 2.7.0-5.fc26
Red Hat OpenStack - addressed in versions 10.0, 11.0
openvswitch - update to 2.7.0-5.fc26
Red Hat OpenStack - addressed in versions 10.0, 11.0