Every CVE Search/ Get API key

OSV-2020-2197

Heap-use-after-free in decode_NXAST_RAW_ENCAP

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851

Crash type: Heap-use-after-free WRITE 2
Crash state:
decode_NXAST_RAW_ENCAP
ofpact_decode
ofpacts_decode

What each source reports

OSV No score

Heap-use-after-free in decode_NXAST_RAW_ENCAP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851

Crash type: Heap-use-after-free WRITE 2
Crash state:
decode_NXAST_RAW_ENCAP
ofpact_decode
ofpacts_decode
Record
OSV-2020-2197
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
OSS-Fuzz
Listed versions, plus commit ranges
v2.11.0v2.11.1v2.11.2v2.11.3v2.11.4
Show 14 moreShow less
v2.11.5v2.11.6v2.12.0v2.12.1v2.12.2v2.12.3v2.13.0v2.13.1v2.13.2v2.13.3v2.14.0v2.14.1v2.14.2v2.15.0
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2020-2197 is a vulnerability with no CVSS score yet in openvswitch, published November 27, 2020. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open