Every CVE Search/ Get API key

CVE-2017-9264

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer...

9.8 CriticalFix available

CVE-2017-9264 is a critical vulnerability (CVSS 9.8) in Openvswitch, published May 29, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.42%, the 84th percentile. Fixed in openvswitch 2.8.1+dfsg1-2.

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.42%Up 1.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.

Record
CVE-2017-9264
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.

Record
CVE-2017-9264
Updated
2026-11-02
EUVDEUVD-2017-18200 No score

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.

Record
EUVD-2017-18200
Updated
2026-11-03
GitHub AdvisoriesGHSA-r4pw-w7qg-248f 9.8

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer...

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.

Record
GHSA-r4pw-w7qg-248f
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 9.8

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.

Record
CVE-2017-9264
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-9264 9.8

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.

Record
DEBIAN-CVE-2017-9264
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:2418 7.5

Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update

Record
RHSA-2017:2418
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:2648 7.5

Red Hat Security Advisory: openvswitch security and bug fix update

Record
RHSA-2017:2648
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:2727 7.5

Red Hat Security Advisory: openvswitch security update

Record
RHSA-2017:2727
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
Debian:12
 before 2.8.1+dfsg1-2
2.8.1+dfsg1-2
openvswitch
Debian:13
 before 2.8.1+dfsg1-2
2.8.1+dfsg1-2
openvswitch
Debian:14
 before 2.8.1+dfsg1-2
2.8.1+dfsg1-2
openvswitch
Red Hat:enterprise_linux:7::hypervisor
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-debuginfo
Red Hat:enterprise_linux:7::hypervisor
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-devel
Red Hat:enterprise_linux:7::hypervisor
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-ovn-common
Red Hat:enterprise_linux:7::hypervisor
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-ovn-host
Red Hat:enterprise_linux:7::hypervisor
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
python-openvswitch
Red Hat:enterprise_linux:7::hypervisor
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
Show 20 moreShow less
Affected packages
PackageAffectedFixed
openvswitch-debuginfo
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-devel
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-ovn-central
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-ovn-common
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-ovn-docker
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-ovn-host
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-ovn-vtep
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch-test
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
python-openvswitch
Red Hat:enterprise_linux:7::fastdatapath
 before 0:2.7.2-1.git20170719.el7fdp
0:2.7.2-1.git20170719.el7fdp
openvswitch
Red Hat:openstack:10::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch-debuginfo
Red Hat:openstack:10::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
python-openvswitch
Red Hat:openstack:10::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch-debuginfo
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch-ovn-central
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch-ovn-common
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch-ovn-docker
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch-ovn-host
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
openvswitch-ovn-vtep
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost
python-openvswitch
Red Hat:openstack:11::el7
 before 0:2.6.1-13.git20161206.el7ost
0:2.6.1-13.git20161206.el7ost

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open