Every CVE Search/ Get API key

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

9.8 CriticalFix available

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.39%Up 0.5 points since Jan 11, 2023
90%50%10%1%

What each source reports

NVD Score used 9.8

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
CVE-2022-4338
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125, CWE-191
Updated
2026-11-02
CVE List No score

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
CVE-2022-4338
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2022-51691 No score

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
EUVD-2022-51691
Updated
2026-11-03
GitHub AdvisoriesGHSA-c3mc-r2x5-rwmf 9.8

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
GHSA-c3mc-r2x5-rwmf
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125, CWE-191
Updated
2026-11-02
OSVALPINE-CVE-2022-4338 9.8

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
ALPINE-CVE-2022-4338
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-12953 9.8

CVE-2022-4338 affecting package openvswitch for versions less than 2.17.5-1

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
AZL-12953
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 21 moreShow less
OSVDEBIAN-CVE-2022-4338 9.8

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
DEBIAN-CVE-2022-4338
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2023-1025 5.6

openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.

Security Fix(es):

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.(CVE-2022-4338)

Record
OESA-2023-1025
CVSS 3.1
5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-1042 5.6

openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.

Security Fix(es):

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.(CVE-2022-4338)

Record
OESA-2023-1042
CVSS 3.1
5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-1043 5.6

openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.

Security Fix(es):

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.(CVE-2022-4338)

Record
OESA-2023-1043
CVSS 3.1
5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2023:0685 9.8

Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update

Record
RHSA-2023:0685
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0687 9.8

Red Hat Security Advisory: openvswitch2.15 security, bug fix and enhancement update

Record
RHSA-2023:0687
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0688 9.8

Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update

Record
RHSA-2023:0688
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0689 9.8

Red Hat Security Advisory: openvswitch2.16 security, bug fix and enhancement update

Record
RHSA-2023:0689
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0691 9.8

Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update

Record
RHSA-2023:0691
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-4338 9.8

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
UBUNTU-CVE-2022-4338
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV No score

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Record
CVE-2022-4338
Weakness
CWE-125
Updated
2026-11-02
OSVopenSUSE-SU-2024:12860-1 No score

libopenvswitch-3_1-0-3.1.0-12.1 on GA media

These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-12.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12860-1
Updated
2026-11-02
OSVSUSE-SU-2023:2250-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2250-1
Updated
2026-11-02
OSVSUSE-SU-2023:2250-2 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2250-2
Updated
2026-11-02
OSVSUSE-SU-2023:2251-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2251-1
Updated
2026-11-02
OSVSUSE-SU-2023:2255-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2255-1
Updated
2026-11-02
OSVSUSE-SU-2023:2259-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
  • CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).
Record
SUSE-SU-2023:2259-1
Updated
2026-11-02
OSVSUSE-SU-2023:2274-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2274-1
Updated
2026-11-02
OSVSUSE-SU-2023:2275-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
Record
SUSE-SU-2023:2275-1
Updated
2026-11-02
OSVSUSE-SU-2023:2360-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
  • CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
  • CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).
  • CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
Record
SUSE-SU-2023:2360-1
Updated
2026-11-02
OSVUSN-5890-1 No score

openvswitch vulnerabilities

Qian Chen discovered that Open vSwitch incorrectly handled certain Organization Specific TLVs. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-5890-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
Alpine:v3.18
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.19
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.20
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.21
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.22
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.23
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Alpine:v3.24
 2.14.0 up to 2.17.5-r0
2.17.5-r0
openvswitch
Azure Linux:2
 before 2.17.5-1
2.17.5-1
openvswitch
Debian:12
 before 3.1.0~git20221212.739bcf2-4
3.1.0~git20221212.739bcf2-4
openvswitch
Debian:13
 before 3.1.0~git20221212.739bcf2-4
3.1.0~git20221212.739bcf2-4
Show 90 moreShow less
Affected packages
PackageAffectedFixed
openvswitch
Debian:14
 before 3.1.0~git20221212.739bcf2-4
3.1.0~git20221212.739bcf2-4
openvswitch
Debian:10
From an advisory covering 2 CVEs
 before 2.10.7+ds1-0+deb10u3, plus listed versions
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-122.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u12.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u22.10.0+2018.08.28+git.8ca7c82b7d+ds1-132.10.6+ds1-0+deb10u12.10.7+ds1-0+deb10u12.10.7+ds1-0+deb10u2
2.10.7+ds1-0+deb10u3
openvswitch
Debian:11
From an advisory covering 2 CVEs
 before 2.15.0+ds1-2+deb11u2, plus listed versions
2.15.0+ds1-22.15.0+ds1-2+deb11u1
2.15.0+ds1-2+deb11u2
openvswitch
openEuler:22.03-LTS
 before 2.12.4-2.oe2203sp1
2.12.4-2.oe2203sp1
openvswitch
openEuler:22.03-LTS-SP1
 before 2.12.4-2.oe2203sp1
2.12.4-2.oe2203sp1
openvswitch
openEuler:20.03-LTS-SP3
 before 2.12.4-3.oe1
2.12.4-3.oe1
openvswitch
openEuler:20.03-LTS-SP1
 before 2.12.4-3.oe1
2.12.4-3.oe1
network-scripts-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
openvswitch2.13-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
python3-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
python3-openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-212.el8fdp
0:2.13.0-212.el8fdp
network-scripts-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
openvswitch2.15-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
python3-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.15.0-133.el8fdp
0:2.15.0-133.el8fdp
network-scripts-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
openvswitch2.17-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-71.el8fdp
0:2.17.0-71.el8fdp
network-scripts-openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.16-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
python3-openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
python3-openvswitch2.16-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.16.0-111.el8fdp
0:2.16.0-111.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch2.17-test
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.17.0-62.el9fdp
0:2.17.0-62.el9fdp
openvswitch
SUSE:Linux Enterprise Module for Legacy 15 SP5
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 2.14.2-150400.24.6.1
2.14.2-150400.24.6.1
openvswitch
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 2.11.5-3.15.1
2.11.5-3.15.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 2.11.5-3.15.1
2.11.5-3.15.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.21.1
2.11.5-150100.3.21.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.21.1
2.11.5-150100.3.21.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.11.5-150100.3.21.1
2.11.5-150100.3.21.1
openvswitch
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 2.5.11-25.34.1
2.5.11-25.34.1
openvswitch-dpdk
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 2.5.11-25.34.1
2.5.11-25.34.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Enterprise Storage 7
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 2.13.2-150200.9.22.1
2.13.2-150200.9.22.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Manager Proxy 4.2
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Manager Server 4.2
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 2.14.2-150300.19.8.1
2.14.2-150300.19.8.1
openvswitch
SUSE:OpenStack Cloud 9
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server 12 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.8.10-4.33.1
2.8.10-4.33.1
openvswitch
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2
Show 11 moreShow less
2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.32.5.9-0ubuntu0.16.04.3+esm1
 None known
openvswitch
Ubuntu:18.04:LTS
 before 2.9.8-0ubuntu0.18.04.4, plus listed versions
2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1
Show 6 moreShow less
2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.3
2.9.8-0ubuntu0.18.04.4
openvswitch
Ubuntu:20.04:LTS
 before 2.13.8-0ubuntu1.1, plus listed versions
2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2
Show 12 moreShow less
2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.32.13.1-0ubuntu0.20.04.42.13.3-0ubuntu0.20.04.12.13.3-0ubuntu0.20.04.22.13.5-0ubuntu12.13.8-0ubuntu1
2.13.8-0ubuntu1.1
openvswitch
Ubuntu:22.04:LTS
 before 2.17.3-0ubuntu0.22.04.2, plus listed versions
2.16.0-0ubuntu22.16.0-0ubuntu32.16.0-0ubuntu42.17.0~git20220105.0d1ffb7-0ubuntu12.17.0~git20220118.1b9fd88-0ubuntu1
Show 5 moreShow less
2.17.0~git20220121.109d024-0ubuntu12.17.0-0ubuntu12.17.2-0ubuntu0.22.04.12.17.2-0ubuntu0.22.04.22.17.3-0ubuntu0.22.04.1
2.17.3-0ubuntu0.22.04.2
openvswitch
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.9.8-0ubuntu0.18.04.4, plus listed versions
2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1
Show 6 moreShow less
2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.3
2.9.8-0ubuntu0.18.04.4
openvswitch
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.13.8-0ubuntu1.1, plus listed versions
2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2
Show 12 moreShow less
2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.32.13.1-0ubuntu0.20.04.42.13.3-0ubuntu0.20.04.12.13.3-0ubuntu0.20.04.22.13.5-0ubuntu12.13.8-0ubuntu1
2.13.8-0ubuntu1.1
openvswitch
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2.17.3-0ubuntu0.22.04.2, plus listed versions
2.16.0-0ubuntu22.16.0-0ubuntu32.16.0-0ubuntu42.17.0~git20220105.0d1ffb7-0ubuntu12.17.0~git20220118.1b9fd88-0ubuntu1
Show 5 moreShow less
2.17.0~git20220121.109d024-0ubuntu12.17.0-0ubuntu12.17.2-0ubuntu0.22.04.12.17.2-0ubuntu0.22.04.22.17.3-0ubuntu0.22.04.1
2.17.3-0ubuntu0.22.04.2
openvswitch
openSUSE:Tumbleweed
 before 3.1.0-12.1
3.1.0-12.1

History

History
RecordedChangedSources
affected, factsOSV
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-4338 is a critical vulnerability (CVSS 9.8) in Openvswitch, published December 31, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in openvswitch 2.17.5-r0.

References

Show 54 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open