Every CVE Search/ Get API key

CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

9.8 CriticalFix available

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.39%Up 0.5 points since Jan 11, 2023
90%50%10%1%

What each source reports

NVD Score used 9.8

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
CVE-2022-4337
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
CVE-2022-4337
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2022-51690 No score

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
EUVD-2022-51690
Updated
2026-11-03
GitHub AdvisoriesGHSA-3ch9-x7v9-qhxv 9.8

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
GHSA-3ch9-x7v9-qhxv
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2022-4337 9.8

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
ALPINE-CVE-2022-4337
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-12952 9.8

CVE-2022-4337 affecting package openvswitch for versions less than 2.17.5-1

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
AZL-12952
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVDEBIAN-CVE-2022-4337 9.8

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
DEBIAN-CVE-2022-4337
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVRHSA-2023:0685 9.8

Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update

Record
RHSA-2023:0685
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0687 9.8

Red Hat Security Advisory: openvswitch2.15 security, bug fix and enhancement update

Record
RHSA-2023:0687
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0688 9.8

Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update

Record
RHSA-2023:0688
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0689 9.8

Red Hat Security Advisory: openvswitch2.16 security, bug fix and enhancement update

Record
RHSA-2023:0689
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0691 9.8

Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update

Record
RHSA-2023:0691
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-4337 9.8

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
UBUNTU-CVE-2022-4337
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV No score

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
CVE-2022-4337
Weakness
CWE-125
Updated
2026-11-02
OSVSUSE-SU-2023:2250-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2250-1
Updated
2026-11-02
OSVSUSE-SU-2023:2250-2 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2250-2
Updated
2026-11-02
OSVSUSE-SU-2023:2251-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2251-1
Updated
2026-11-02
OSVSUSE-SU-2023:2255-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2255-1
Updated
2026-11-02
OSVSUSE-SU-2023:2259-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
  • CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).
Record
SUSE-SU-2023:2259-1
Updated
2026-11-02
OSVSUSE-SU-2023:2274-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2274-1
Updated
2026-11-02
OSVSUSE-SU-2023:2275-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2275-1
Updated
2026-11-02
OSVSUSE-SU-2023:2360-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
  • CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).
  • CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
Record
SUSE-SU-2023:2360-1
Updated
2026-11-02
OSVUSN-5890-1 No score

openvswitch vulnerabilities

Qian Chen discovered that Open vSwitch incorrectly handled certain Organization Specific TLVs. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-5890-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
Alpine:v3.18
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.19
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.20
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.21
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.22
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.23
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.24
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Azure Linux:2
 before 2.17.5-1
2.17.5-1
openvswitch
Debian:12
 before 3.1.0~git20221212.739bcf2-4
3.1.0~git20221212.739bcf2-4
openvswitch
Debian:13
 before 3.1.0~git20221212.739bcf2-4
3.1.0~git20221212.739bcf2-4
Show 85 moreShow less
Affected packages
PackageAffectedFixed
openvswitch
Debian:14
 before 3.1.0~git20221212.739bcf2-4
3.1.0~git20221212.739bcf2-4
openvswitch
Debian:10
From an advisory covering 2 CVEs
 before 2.10.7+ds1-0+deb10u3, plus listed versions
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-122.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u12.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u22.10.0+2018.08.28+git.8ca7c82b7d+ds1-132.10.6+ds1-0+deb10u12.10.7+ds1-0+deb10u12.10.7+ds1-0+deb10u2
2.10.7+ds1-0+deb10u3
openvswitch
Debian:11
From an advisory covering 2 CVEs
 before 2.15.0+ds1-2+deb11u2, plus listed versions
2.15.0+ds1-22.15.0+ds1-2+deb11u1
2.15.0+ds1-2+deb11u2
network-scripts-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
python3-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
python3-openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
network-scripts-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
python3-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
network-scripts-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
network-scripts-openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
python3-openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
python3-openvswitch2.16-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-test
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch
SUSE:Linux Enterprise Module for Legacy 15 SP5
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 2.11.5-3.15.1
2.11.5-3.15.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 2.11.5-3.15.1
2.11.5-3.15.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.21.1
2.11.5-150100.3.21.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.21.1
2.11.5-150100.3.21.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.21.1
2.11.5-150100.3.21.1
openvswitch
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 2.5.11-25.34.1
2.5.11-25.34.1
openvswitch-dpdk
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 2.5.11-25.34.1
2.5.11-25.34.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Enterprise Storage 7
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Manager Proxy 4.2
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Manager Server 4.2
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:OpenStack Cloud 9
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server 12 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2
Show 11 moreShow less
2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.32.5.9-0ubuntu0.16.04.3+esm1
 None known
openvswitch
Ubuntu:18.04:LTS
 before 2.9.8-0ubuntu0.18.04.4, plus listed versions
2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1
Show 6 moreShow less
2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.3
2.9.8-0ubuntu0.18.04.4
openvswitch
Ubuntu:20.04:LTS
 before 2.13.8-0ubuntu1.1, plus listed versions
2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2
Show 12 moreShow less
2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.32.13.1-0ubuntu0.20.04.42.13.3-0ubuntu0.20.04.12.13.3-0ubuntu0.20.04.22.13.5-0ubuntu12.13.8-0ubuntu1
2.13.8-0ubuntu1.1
openvswitch
Ubuntu:22.04:LTS
 before 2.17.3-0ubuntu0.22.04.2, plus listed versions
2.16.0-0ubuntu22.16.0-0ubuntu32.16.0-0ubuntu42.17.0~git20220105.0d1ffb7-0ubuntu12.17.0~git20220118.1b9fd88-0ubuntu1
Show 5 moreShow less
2.17.0~git20220121.109d024-0ubuntu12.17.0-0ubuntu12.17.2-0ubuntu0.22.04.12.17.2-0ubuntu0.22.04.22.17.3-0ubuntu0.22.04.1
2.17.3-0ubuntu0.22.04.2
openvswitch
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.9.8-0ubuntu0.18.04.4, plus listed versions
2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1
Show 6 moreShow less
2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.3
2.9.8-0ubuntu0.18.04.4
openvswitch
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.13.8-0ubuntu1.1, plus listed versions
2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2
Show 12 moreShow less
2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.32.13.1-0ubuntu0.20.04.42.13.3-0ubuntu0.20.04.12.13.3-0ubuntu0.20.04.22.13.5-0ubuntu12.13.8-0ubuntu1
2.13.8-0ubuntu1.1
openvswitch
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2.17.3-0ubuntu0.22.04.2, plus listed versions
2.16.0-0ubuntu22.16.0-0ubuntu32.16.0-0ubuntu42.17.0~git20220105.0d1ffb7-0ubuntu12.17.0~git20220118.1b9fd88-0ubuntu1
Show 5 moreShow less
2.17.0~git20220121.109d024-0ubuntu12.17.0-0ubuntu12.17.2-0ubuntu0.22.04.12.17.2-0ubuntu0.22.04.22.17.3-0ubuntu0.22.04.1
2.17.3-0ubuntu0.22.04.2

History

History
RecordedChangedSources
affected, factsOSV
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-4337 is a critical vulnerability (CVSS 9.8) in Openvswitch, published December 31, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in openvswitch 2.17.5-r0.

References

Show 51 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open