{"id":"CVE-2017-9214","aliases":["DEBIAN-CVE-2017-9214","DLA-2571-1","EUVD-2017-18152","GHSA-6q3f-fc2p-9rh3","RHSA-2017:2418","RHSA-2017:2553","RHSA-2017:2648","RHSA-2017:2665","RHSA-2017:2692","RHSA-2017:2698","RHSA-2017:2727","SUSE-SU-2018:0311-1","SUSE-SU-2018:0505-1","UBUNTU-CVE-2017-9214","USN-3450-1"],"status":"published","title":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,...","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02887,"percentile":0.86978,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191"],"published":"2017-05-23T00:00:00Z","modified":"2026-10-24T10:31:07Z","fixes":[{"ecosystem":"Debian:12","package":"openvswitch","fixed_in":["2.8.1+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openvswitch","fixed_in":["2.8.1+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openvswitch","fixed_in":["2.8.1+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openvswitch","fixed_in":["2.5.2-0ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.10-0+deb9u1"}]}],"versions":["2.6.2~pre+git20161223-3"],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-ovn-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-ovn-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-1.git20170719.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-15.git20160727.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"openvswitch-ovn-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"openvswitch-ovn-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"openvswitch-ovn-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"openvswitch-ovn-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"openvswitch-ovn-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-13.git20161206.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-25.12.7"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-25.12.7"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"openvswitch-dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-25.12.8"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-25.12.7"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openvswitch-dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-25.12.8"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-6.4.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-0ubuntu0.16.04.2"}]}],"versions":["2.4.0-0ubuntu4","2.4.0-0ubuntu5","2.5.0~git20160129.46a88d9-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu2","2.5.0~git20160219.522aca6-0ubuntu3","2.5.0-0ubuntu1","2.5.2-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-0ubuntu0.16.04.2"}]}],"versions":["2.4.0-0ubuntu4","2.4.0-0ubuntu5","2.5.0~git20160129.46a88d9-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu2","2.5.0~git20160219.522aca6-0ubuntu3","2.5.0-0ubuntu1","2.5.2-0ubuntu0.16.04.1"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openvswitch","product":"openvswitch"},{"vendor":"redhat","product":"openstack"},{"vendor":"redhat","product":"virtualization"},{"vendor":"redhat","product":"virtualization_manager"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:2698","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2727","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Patch","Vendor Advisory","fix","report"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2692","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2553","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2418","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2648","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2665","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9214","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6q3f-fc2p-9rh3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9214","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1456795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472854","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2418.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9214","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9214","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9263","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9264","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9265","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9265","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431494","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2553.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473735","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2648.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431499","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2665.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431495","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2692.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431497","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2698.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2727.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180311-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040543","tags":["report"]},{"url":"https://bugzilla.suse.com/1041447","tags":["report"]},{"url":"https://bugzilla.suse.com/1041470","tags":["report"]},{"url":"https://bugzilla.suse.com/1061310","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9265","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180505-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9214","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3450-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-9263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9265","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-9214","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","status":"published","published":"2017-05-23T17:00:00Z","modified":"2024-08-05T17:02:43.682Z","updated_at":"2026-11-02T14:33:13.606903Z"}],"euvd":[{"id":"EUVD-2017-18152","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","status":"published","published":"2017-05-23T17:00:00Z","modified":"2024-08-05T17:02:43Z","updated_at":"2026-11-03T02:23:28.642509Z"}],"ghsa":[{"id":"GHSA-6q3f-fc2p-9rh3","title":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,...","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","status":"published","published":"2022-05-13T01:07:34Z","modified":"2023-02-01T05:03:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:50:02.204531Z"}],"nvd":[{"id":"CVE-2017-9214","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","status":"published","published":"2017-05-23T17:29:00.257Z","modified":"2026-06-17T01:27:41.377Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:03:49.449157Z"}],"osv":[{"id":"CVE-2017-9214","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","status":"published","published":"2017-05-23T17:29:00.257Z","modified":"2026-10-24T10:31:07.221033723Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-9214","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","status":"published","published":"2017-05-23T17:29:00.257Z","modified":"2026-09-01T20:03:05.348817333Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"RHSA-2017:2418","title":"Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:49:01Z","modified":"2026-06-29T10:17:12Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2553","title":"Red Hat Security Advisory: openvswitch security update","status":"published","published":"2024-09-13T16:49:21Z","modified":"2026-06-29T10:17:31Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2648","title":"Red Hat Security Advisory: openvswitch security and bug fix update","status":"published","published":"2024-09-13T16:49:16Z","modified":"2026-06-29T10:17:36Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2665","title":"Red Hat Security Advisory: openvswitch security update","status":"published","published":"2024-09-13T16:49:24Z","modified":"2026-06-29T10:17:37Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2692","title":"Red Hat Security Advisory: openvswitch security update","status":"published","published":"2024-09-13T16:49:09Z","modified":"2026-06-29T10:17:44Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2698","title":"Red Hat Security Advisory: openvswitch security update","status":"published","published":"2024-09-13T16:49:14Z","modified":"2026-06-29T10:17:45Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2727","title":"Red Hat Security Advisory: openvswitch security update","status":"published","published":"2024-09-13T16:49:06Z","modified":"2026-06-29T10:17:50Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-9214","description":"In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.","status":"published","published":"2017-05-23T00:00:00Z","modified":"2026-02-04T02:36:27.49564Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DLA-2571-1","title":"openvswitch - security update","status":"published","published":"2021-02-19T00:00:00Z","modified":"2026-03-09T01:21:41.381821Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"SUSE-SU-2018:0311-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n* CVE-2017-9263: While parsing an OpenFlow role status message, there is a call to the abort() functio  for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (bsc#1041470)\n* CVE-2017-9265: Buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.(bsc#1041447)\n* CVE-2017-9214: While parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. (bsc#1040543)\n* CVE-2017-14970: In lib/ofp-util.c, there are multiple memory leaks while parsing malformed OpenFlow group mod messages.(bsc#1061310)\n\n","status":"published","published":"2018-01-31T10:58:41Z","modified":"2026-02-04T03:27:32.954292Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0505-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n* CVE-2017-9263: While parsing an OpenFlow role status message, there is a call to the abort() functio  for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (bsc#1041470)\n* CVE-2017-9265: Buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.(bsc#1041447)\n* CVE-2017-9214: While parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. (bsc#1040543)\n* CVE-2017-14970: In lib/ofp-util.c, there are multiple memory leaks while parsing malformed OpenFlow group mod messages.(bsc#1061310)\n\n* Do not stop the systemd service on package removals as this can\n  break networking. Moreover, this allows us to easily update to\n  more recent openvswitch releases without connectivity problems (bsc#1050896)\n\n","status":"published","published":"2018-02-21T08:04:26Z","modified":"2026-02-04T02:42:34.903676Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3450-1","title":"openvswitch vulnerabilities","description":"Bhargava Shastry discovered that Open vSwitch incorrectly handled certain\nOFP messages. A remote attacker could possibly use this issue to cause\nOpen vSwitch to crash, resulting in a denial of service. (CVE-2017-9214)\n\nIt was discovered that Open vSwitch incorrectly handled certain OpenFlow\nrole messages. A remote attacker could possibly use this issue to cause\nOpen vSwitch to crash, resulting in a denial of service. (CVE-2017-9263)\n\nIt was discovered that Open vSwitch incorrectly handled certain malformed\npackets. A remote attacker could possibly use this issue to cause Open\nvSwitch to crash, resulting in a denial of service. This issue only\naffected Ubuntu 17.04. (CVE-2017-9264)\n\nIt was discovered that Open vSwitch incorrectly handled group mod OpenFlow\nmessages. A remote attacker could possibly use this issue to cause Open\nvSwitch to crash, resulting in a denial of service. (CVE-2017-9265)\n","status":"published","published":"2017-10-11T11:54:52Z","modified":"2026-02-10T04:41:13Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}