Every CVE Search/ Get API key

CVE-2024-22563

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in...

7.5 HighFix available

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.57%Up 0.5 points since Jan 24, 2024
90%50%10%1%

What each source reports

NVD Score used 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Record
CVE-2024-22563
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
CVE List 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Record
CVE-2024-22563
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
EUVDEUVD-2024-20099 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Record
EUVD-2024-20099
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-79hq-vf7m-fqvr 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in...

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Record
GHSA-79hq-vf7m-fqvr
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
OSV 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Record
CVE-2024-22563
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-22563 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Record
DEBIAN-CVE-2024-22563
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2024-22563 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Record
UBUNTU-CVE-2024-22563
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2024:0462-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).
Record
SUSE-SU-2024:0462-1
Updated
2026-11-02
OSVSUSE-SU-2024:0524-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).
Record
SUSE-SU-2024:0524-1
Updated
2026-11-02
OSVSUSE-SU-2024:0526-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).
Record
SUSE-SU-2024:0526-1
Updated
2026-11-02
OSVSUSE-SU-2024:0544-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).
Record
SUSE-SU-2024:0544-1
Updated
2026-11-02
OSVSUSE-SU-2024:0553-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).
Record
SUSE-SU-2024:0553-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
Debian:12
 before 2.17.2-4
2.17.2-4
openvswitch
Debian:13
 before 2.17.2-4
2.17.2-4
openvswitch
Debian:14
 before 2.17.2-4
2.17.2-4
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 2.11.5-150100.3.24.1
2.11.5-150100.3.24.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 2.14.2-150300.19.17.1
2.14.2-150300.19.17.1
openvswitch
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 2.14.2-150300.19.17.1
2.14.2-150300.19.17.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 2.14.2-150300.19.17.1
2.14.2-150300.19.17.1
openvswitch
SUSE:Enterprise Storage 7.1
 before 2.14.2-150300.19.17.1
2.14.2-150300.19.17.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 2.13.2-150200.9.31.1
2.13.2-150200.9.31.1
openvswitch
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 2.13.2-150200.9.31.1
2.13.2-150200.9.31.1
Show 13 moreShow less
Affected packages
PackageAffectedFixed
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 2.13.2-150200.9.31.1
2.13.2-150200.9.31.1
openvswitch
SUSE:Linux Enterprise Server 12 SP5
 before 2.11.5-3.21.1
2.11.5-3.21.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.11.5-3.21.1
2.11.5-3.21.1
openvswitch
SUSE:Linux Enterprise Module for Legacy 15 SP5
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
SUSE:Manager Proxy 4.3
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
SUSE:Manager Server 4.3
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
openSUSE:Leap 15.5
 before 2.14.2-150400.24.20.1
2.14.2-150400.24.20.1
openvswitch
Ubuntu:20.04:LTS
 before 2.13.8-0ubuntu1.1, plus listed versions
2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2
Show 12 moreShow less
2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.32.13.1-0ubuntu0.20.04.42.13.3-0ubuntu0.20.04.12.13.3-0ubuntu0.20.04.22.13.5-0ubuntu12.13.8-0ubuntu1
2.13.8-0ubuntu1.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-22563 is a high vulnerability (CVSS 7.5) in Openvswitch, published January 19, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in openvswitch 2.17.2-4.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open