Every CVE Search/ Get API key

CVE-2022-32166

ovs - buffer over-read

6.1 MediumFix available

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

0.61%Down 1.4 points since Sep 29, 2022
90%50%10%1%

What each source reports

CVE List Score used 6.1

ovs - buffer over-read

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Record
CVE-2022-32166
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2022-53397 6.1

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Record
EUVD-2022-53397
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3q99-mmr6-6chg 8.8

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An...

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Record
GHSA-3q99-mmr6-6chg
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 6.1

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Record
CVE-2022-32166
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 6.1

ovs - buffer over-read

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Record
CVE-2022-32166
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVDEBIAN-CVE-2022-32166 6.1

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Record
DEBIAN-CVE-2022-32166
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-03
Show 7 moreShow less
OSVUBUNTU-CVE-2022-32166 8.8

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Record
UBUNTU-CVE-2022-32166
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2022:4050-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).
Record
SUSE-SU-2022:4050-1
Updated
2026-11-02
OSVSUSE-SU-2023:1795-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
  • CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).
Record
SUSE-SU-2023:1795-1
Updated
2026-11-02
OSVSUSE-SU-2023:2259-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
  • CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).
Record
SUSE-SU-2023:2259-1
Updated
2026-11-02
OSVSUSE-SU-2023:2360-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
  • CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).
  • CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
Record
SUSE-SU-2023:2360-1
Updated
2026-11-02
OSVUSN-5698-1 No score

openvswitch vulnerability

It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-5698-1
Updated
2026-11-02
OSVUSN-5698-2 No score

openvswitch vulnerability

USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-5698-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
Debian:12
 before 2.13.0+dfsg1-1
2.13.0+dfsg1-1
openvswitch
Debian:13
 before 2.13.0+dfsg1-1
2.13.0+dfsg1-1
openvswitch
Debian:14
 before 2.13.0+dfsg1-1
2.13.0+dfsg1-1
openvswitch
Debian:10
 before 2.10.7+ds1-0+deb10u2, plus listed versions
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-122.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u12.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u22.10.0+2018.08.28+git.8ca7c82b7d+ds1-132.10.6+ds1-0+deb10u12.10.7+ds1-0+deb10u1
2.10.7+ds1-0+deb10u2
openvswitch
SUSE:Linux Enterprise Server 12 SP5
 before 2.11.5-3.12.1
2.11.5-3.12.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.11.5-3.12.1
2.11.5-3.12.1
dpdk
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 18.11.9-150100.4.23.1
18.11.9-150100.4.23.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.18.2
2.11.5-150100.3.18.2
dpdk
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 18.11.9-150100.4.23.1
18.11.9-150100.4.23.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.18.2
2.11.5-150100.3.18.2
Show 9 moreShow less
Affected packages
PackageAffectedFixed
openvswitch
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 2.5.11-25.34.1
2.5.11-25.34.1
openvswitch-dpdk
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 2.5.11-25.34.1
2.5.11-25.34.1
openvswitch
SUSE:OpenStack Cloud 9
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server 12 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
Ubuntu:Pro:16.04:LTS
 before 2.5.9-0ubuntu0.16.04.3+esm1, plus listed versions
2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2
Show 10 moreShow less
2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.3
2.5.9-0ubuntu0.16.04.3+esm1
openvswitch
Ubuntu:18.04:LTS
 before 2.9.8-0ubuntu0.18.04.3, plus listed versions
2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1
Show 5 moreShow less
2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.2
2.9.8-0ubuntu0.18.04.3

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-32166 is a medium vulnerability (CVSS 6.1) in Ovs, published September 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in openvswitch 2.13.0+dfsg1-1.

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open