Every CVE Search/ Get API key

CVE-2023-1668

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will...

8.2 HighFix available

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

1.22%Up 1.2 points since Apr 11, 2023
90%50%10%1%

What each source reports

NVD Score used 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
CVE-2023-1668
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-670
Updated
2026-11-02
CVE List 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
CVE-2023-1668
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-670
Updated
2026-11-02
EUVDEUVD-2023-23896 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
EUVD-2023-23896
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-w6wj-g5cv-fh4w 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will...

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
GHSA-w6wj-g5cv-fh4w
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-670
Updated
2026-11-02
OSVALPINE-CVE-2023-1668 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
ALPINE-CVE-2023-1668
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-03
OSVAZL-26031 8.2

CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
AZL-26031
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
Show 21 moreShow less
OSVAZL-35088 8.2

CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-3

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
AZL-35088
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSV 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
CVE-2023-1668
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-670
Updated
2026-11-02
OSVDEBIAN-CVE-2023-1668 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
DEBIAN-CVE-2023-1668
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1234 7.1

openvswitch security update

Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.

Security Fix(es):

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.(CVE-2023-1668)

Record
OESA-2023-1234
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1765 8.2

Red Hat Security Advisory: openvswitch2.17 security update

Record
RHSA-2023:1765
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1766 8.2

Red Hat Security Advisory: openvswitch3.1 security update

Record
RHSA-2023:1766
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1769 8.2

Red Hat Security Advisory: openvswitch2.17 security update

Record
RHSA-2023:1769
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1770 8.2

Red Hat Security Advisory: openvswitch3.1 security update

Record
RHSA-2023:1770
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1823 8.2

Red Hat Security Advisory: openvswitch2.13 security update

Record
RHSA-2023:1823
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1824 8.2

Red Hat Security Advisory: openvswitch2.15 security update

Record
RHSA-2023:1824
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:3491 8.2

Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update

Record
RHSA-2023:3491
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-1668 8.2

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Record
UBUNTU-CVE-2023-1668
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:12942-1 No score

libopenvswitch-3_1-0-3.1.0-14.1 on GA media

These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-14.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12942-1
Updated
2026-11-02
OSVSUSE-SU-2023:2274-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2274-1
Updated
2026-11-02
OSVSUSE-SU-2023:2275-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2275-1
Updated
2026-11-02
OSVSUSE-SU-2023:2296-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
Record
SUSE-SU-2023:2296-1
Updated
2026-11-02
OSVSUSE-SU-2023:2536-1 No score

Security update for openvswitch3

This update for openvswitch3 fixes the following issues:

  • CVE-2023-1668: Fixed a remote denial of service that could be triggered via malformed IP packets (bsc#1210054).
Record
SUSE-SU-2023:2536-1
Updated
2026-11-02
OSVSUSE-SU-2023:2621-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial-of-service via crafted packets with IP proto 0 (bsc#1210054).
Record
SUSE-SU-2023:2621-1
Updated
2026-11-02
OSVSUSE-SU-2026:0280-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

Update to v3.1.7:

  • CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).
  • CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).
  • CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
  • CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).
Record
SUSE-SU-2026:0280-1
Updated
2026-11-02
OSVSUSE-SU-2026:0290-1 No score

Security update for openvswitch3

This update for openvswitch3 fixes the following issues:

Update to v3.1.7:

  • CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).
  • CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).
  • CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
  • CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).
Record
SUSE-SU-2026:0290-1
Updated
2026-11-02
OSVUSN-6068-1 No score

openvswitch vulnerability

David Marchand discovered that Open vSwitch incorrectly handled IP packets with the protocol set to 0. A remote attacker could possibly use this issue to cause a denial of service.

Record
USN-6068-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
Alpine:v3.18
 before 2.17.6-r0
2.17.6-r02.17.8-r0
openvswitch
Alpine:v3.19
 before 2.17.6-r0
2.17.6-r02.17.8-r0
openvswitch
Alpine:v3.20
 before 2.17.6-r0
2.17.6-r02.17.8-r0
openvswitch
Alpine:v3.21
 before 2.17.6-r0
2.17.6-r02.17.8-r0
openvswitch
Alpine:v3.22
 before 2.17.6-r0
2.17.6-r02.17.8-r0
openvswitch
Alpine:v3.23
 before 2.17.6-r0
2.17.6-r02.17.8-r0
openvswitch
Alpine:v3.24
 before 2.17.6-r0
2.17.6-r02.17.8-r0
openvswitch
Azure Linux:2
 before 2.17.5-2
2.17.5-2
openvswitch
Azure Linux:3
 before 2.17.5-3
2.17.5-3
openvswitch
Debian:12
 before 3.1.0-2
3.1.0-2
Show 99 moreShow less
Affected packages
PackageAffectedFixed
openvswitch
Debian:13
 before 3.1.0-2
3.1.0-2
openvswitch
Debian:14
 before 3.1.0-2
3.1.0-2
openvswitch
Debian:10
 before 2.10.7+ds1-0+deb10u4, plus listed versions
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-122.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u12.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u22.10.0+2018.08.28+git.8ca7c82b7d+ds1-132.10.6+ds1-0+deb10u12.10.7+ds1-0+deb10u12.10.7+ds1-0+deb10u22.10.7+ds1-0+deb10u3
2.10.7+ds1-0+deb10u4
openvswitch
Debian:11
 before 2.15.0+ds1-2+deb11u4, plus listed versions
2.15.0+ds1-22.15.0+ds1-2+deb11u12.15.0+ds1-2+deb11u22.15.0+ds1-2+deb11u3
2.15.0+ds1-2+deb11u4
openvswitch
openEuler:20.03-LTS-SP1
 before 2.12.4-4.oe1
2.12.4-4.oe1
openvswitch
openEuler:20.03-LTS-SP3
 before 2.12.4-5.oe1
2.12.4-5.oe1
openvswitch
openEuler:22.03-LTS
 before 2.12.4-3.oe2203sp1
2.12.4-3.oe2203sp1
openvswitch
openEuler:22.03-LTS-SP1
 before 2.12.4-3.oe2203sp1
2.12.4-3.oe2203sp1
network-scripts-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
openvswitch2.17-test
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.17.0-88.el8fdp
0:2.17.0-88.el8fdp
network-scripts-openvswitch3.1
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
openvswitch3.1
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
openvswitch3.1-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
openvswitch3.1-debugsource
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
openvswitch3.1-devel
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
openvswitch3.1-ipsec
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
openvswitch3.1-test
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
python3-openvswitch3.1
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
python3-openvswitch3.1-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:3.1.0-17.el8fdp
0:3.1.0-17.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
openvswitch2.17-test
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
 before 0:2.17.0-77.el9fdp
0:2.17.0-77.el9fdp
openvswitch3.1
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
openvswitch3.1-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
openvswitch3.1-debugsource
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
openvswitch3.1-devel
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
openvswitch3.1-ipsec
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
openvswitch3.1-test
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
python3-openvswitch3.1
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
python3-openvswitch3.1-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
 before 0:3.1.0-14.el9fdp
0:3.1.0-14.el9fdp
network-scripts-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
openvswitch2.13-debugsource
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
openvswitch2.13-devel
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
openvswitch2.13-ipsec
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
openvswitch2.13-test
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
python3-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
python3-openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.13.0-214.el8fdp
0:2.13.0-214.el8fdp
network-scripts-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
openvswitch2.15-debugsource
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
openvswitch2.15-devel
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
openvswitch2.15-ipsec
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
openvswitch2.15-test
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
python3-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
 before 0:2.15.0-136.el8fdp
0:2.15.0-136.el8fdp
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 6 CVEs
 before 0:4.5.3-202306050942_8.6
0:4.5.3-202306050942_8.6
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 6 CVEs
 before 0:4.5.3-202306050942_8.6
0:4.5.3-202306050942_8.6
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Enterprise Storage 7
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Manager Proxy 4.2
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Manager Server 4.2
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Module for Legacy 15 SP5
 before 2.14.2-150400.24.9.1
2.14.2-150400.24.9.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 2.14.2-150400.24.9.1
2.14.2-150400.24.9.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 2.14.2-150400.24.9.1
2.14.2-150400.24.9.1
openvswitch
SUSE:Linux Enterprise Module for Server Applications 15 SP4
 before 2.14.2-150400.24.9.1
2.14.2-150400.24.9.1
openvswitch
openSUSE:Leap 15.4
 before 2.14.2-150400.24.9.1
2.14.2-150400.24.9.1
openvswitch
openSUSE:Leap 15.5
 before 2.14.2-150400.24.9.1
2.14.2-150400.24.9.1
openvswitch3
SUSE:Linux Enterprise Module for Server Applications 15 SP5
 before 3.1.0-150500.3.3.1
3.1.0-150500.3.3.1
openvswitch3
openSUSE:Leap 15.5
 before 3.1.0-150500.3.3.1
3.1.0-150500.3.3.1
openvswitch
SUSE:Linux Enterprise Server 12 SP5
 before 2.11.5-3.18.2
2.11.5-3.18.2
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.11.5-3.18.2
2.11.5-3.18.2
openvswitch
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 7 CVEs
 before 3.1.7-150600.33.9.1
3.1.7-150600.33.9.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 7 CVEs
 before 3.1.7-150600.33.9.1
3.1.7-150600.33.9.1
openvswitch
openSUSE:Leap 15.6
From an advisory covering 7 CVEs
 before 3.1.7-150600.33.9.1
3.1.7-150600.33.9.1
openvswitch3
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 7 CVEs
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 7 CVEs
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 7 CVEs
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
openSUSE:Leap 15.6
From an advisory covering 7 CVEs
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2
Show 11 moreShow less
2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.32.5.9-0ubuntu0.16.04.3+esm1
 None known
openvswitch
Ubuntu:18.04:LTS
 before 2.9.8-0ubuntu0.18.04.5, plus listed versions
2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1
Show 7 moreShow less
2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.32.9.8-0ubuntu0.18.04.4
2.9.8-0ubuntu0.18.04.5
openvswitch
Ubuntu:20.04:LTS
 before 2.13.8-0ubuntu1.2, plus listed versions
2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2
Show 13 moreShow less
2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.32.13.1-0ubuntu0.20.04.42.13.3-0ubuntu0.20.04.12.13.3-0ubuntu0.20.04.22.13.5-0ubuntu12.13.8-0ubuntu12.13.8-0ubuntu1.1
2.13.8-0ubuntu1.2
openvswitch
Ubuntu:22.04:LTS
 before 2.17.5-0ubuntu0.22.04.2, plus listed versions
2.16.0-0ubuntu22.16.0-0ubuntu32.16.0-0ubuntu42.17.0~git20220105.0d1ffb7-0ubuntu12.17.0~git20220118.1b9fd88-0ubuntu1
Show 6 moreShow less
2.17.0~git20220121.109d024-0ubuntu12.17.0-0ubuntu12.17.2-0ubuntu0.22.04.12.17.2-0ubuntu0.22.04.22.17.3-0ubuntu0.22.04.12.17.3-0ubuntu0.22.04.2
2.17.5-0ubuntu0.22.04.2
openvswitch
openSUSE:Tumbleweed
 before 3.1.0-14.1
3.1.0-14.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-1668 is a high vulnerability (CVSS 8.2) in Cloudbase Open Vswitch, published April 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 68th percentile. Fixed in openvswitch 2.17.6-r0.

References

Show 84 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open