{"id":"CVE-2022-32166","aliases":["DEBIAN-CVE-2022-32166","DLA-3168-1","EUVD-2022-53397","GHSA-3q99-mmr6-6chg","SUSE-SU-2022:4050-1","SUSE-SU-2023:1795-1","SUSE-SU-2023:2259-1","SUSE-SU-2023:2360-1","UBUNTU-CVE-2022-32166","USN-5698-1","USN-5698-2"],"status":"published","title":"ovs - buffer over-read","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00606,"percentile":0.4927,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2022-09-28T09:30:12Z","modified":"2026-11-03T08:01:20Z","fixes":[{"ecosystem":"Debian:12","package":"openvswitch","fixed_in":["2.13.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openvswitch","fixed_in":["2.13.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openvswitch","fixed_in":["2.13.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"openvswitch","fixed_in":["2.10.7+ds1-0+deb10u2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openvswitch","fixed_in":["2.11.5-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openvswitch","fixed_in":["2.11.5-3.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openvswitch","fixed_in":["2.5.9-0ubuntu0.16.04.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openvswitch","fixed_in":["2.9.8-0ubuntu0.18.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.7+ds1-0+deb10u2"}]}],"versions":["2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12","2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u1","2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u2","2.10.0+2018.08.28+git.8ca7c82b7d+ds1-13","2.10.6+ds1-0+deb10u1","2.10.7+ds1-0+deb10u1"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.9-150100.4.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-150100.3.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.9-150100.4.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-150100.3.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.11-25.34.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openvswitch-dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.11-25.34.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-0ubuntu0.16.04.3+esm1"}]}],"versions":["2.4.0-0ubuntu4","2.4.0-0ubuntu5","2.5.0~git20160129.46a88d9-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu2","2.5.0~git20160219.522aca6-0ubuntu3","2.5.0-0ubuntu1","2.5.2-0ubuntu0.16.04.1","2.5.2-0ubuntu0.16.04.2","2.5.2-0ubuntu0.16.04.3","2.5.4-0ubuntu0.16.04.1","2.5.5-0ubuntu0.16.04.1","2.5.5-0ubuntu0.16.04.2","2.5.9-0ubuntu0.16.04.2","2.5.9-0ubuntu0.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-0ubuntu0.18.04.3"}]}],"versions":["2.8.0-0ubuntu2","2.8.1-0ubuntu2","2.8.1-0ubuntu3","2.9.0~git20180205.5a39582ca-0ubuntu1","2.9.0-0ubuntu1","2.9.2-0ubuntu0.18.04.2","2.9.2-0ubuntu0.18.04.3","2.9.5-0ubuntu0.18.04.1","2.9.7-0ubuntu0.18.04.2","2.9.8-0ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-0ubuntu0.18.04.3"}]}],"versions":["2.8.0-0ubuntu2","2.8.1-0ubuntu2","2.8.1-0ubuntu3","2.9.0~git20180205.5a39582ca-0ubuntu1","2.9.0-0ubuntu1","2.9.2-0ubuntu0.18.04.2","2.9.2-0ubuntu0.18.04.3","2.9.5-0ubuntu0.18.04.1","2.9.7-0ubuntu0.18.04.2","2.9.8-0ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-0ubuntu0.16.04.3+esm1"}]}],"versions":["2.4.0-0ubuntu4","2.4.0-0ubuntu5","2.5.0~git20160129.46a88d9-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu2","2.5.0~git20160219.522aca6-0ubuntu3","2.5.0-0ubuntu1","2.5.2-0ubuntu0.16.04.1","2.5.2-0ubuntu0.16.04.2","2.5.2-0ubuntu0.16.04.3","2.5.4-0ubuntu0.16.04.1","2.5.5-0ubuntu0.16.04.1","2.5.5-0ubuntu0.16.04.2","2.5.9-0ubuntu0.16.04.2","2.5.9-0ubuntu0.16.04.3"]}],"products":[{"vendor":"cloudbase","product":"open_vswitch"},{"vendor":"debian","product":"debian_linux"},{"vendor":"ovs","product":"ovs"}],"references":[{"url":"https://www.mend.io/vulnerability-database/CVE-2022-32166","tags":["x_transferred","Third Party Advisory","web","report"]},{"url":"https://github.com/cloudbase/ovs/commit/2ed6505555cdcb46f9b1f0329d1491b75290fc73","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00036.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32166","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3q99-mmr6-6chg"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32166.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-32166","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224050-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203865","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32166","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231795-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188524","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36980","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232259-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206580","tags":["report"]},{"url":"https://bugzilla.suse.com/1206581","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4338","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232360-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-32166","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5698-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5698-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32166","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-32166","title":"ovs - buffer over-read","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","status":"published","published":"2022-09-28T09:30:12.924Z","modified":"2025-05-21T14:13:43.702Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:34:36.917505Z"}],"euvd":[{"id":"EUVD-2022-53397","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","status":"published","published":"2022-09-28T09:30:12Z","modified":"2025-05-21T14:13:43Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:41.46277Z"}],"ghsa":[{"id":"GHSA-3q99-mmr6-6chg","title":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An...","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","status":"published","published":"2022-09-29T00:00:27Z","modified":"2023-01-30T05:02:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:46:44.129156Z"}],"nvd":[{"id":"CVE-2022-32166","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","status":"published","published":"2022-09-28T10:15:09.56Z","modified":"2026-06-17T04:46:47.413Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:29.026521Z"}],"osv":[{"id":"CVE-2022-32166","title":"ovs - buffer over-read","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","status":"published","published":"2022-09-28T09:30:12.924Z","modified":"2026-10-28T10:29:12.180363942Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DEBIAN-CVE-2022-32166","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","status":"published","published":"2022-09-28T10:15:09.56Z","modified":"2026-11-03T08:01:20.251081078Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"UBUNTU-CVE-2022-32166","description":"In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.","status":"published","published":"2022-09-28T10:15:00Z","modified":"2026-02-04T02:44:40.858365Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"DLA-3168-1","title":"openvswitch - security update","status":"published","published":"2022-10-29T00:00:00Z","modified":"2026-03-09T01:19:41.537016Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"SUSE-SU-2022:4050-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).\n\n","status":"published","published":"2022-11-17T14:17:24Z","modified":"2026-02-04T03:28:44.599359Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2023:1795-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of\n  a RAW_ENCAP action (bsc#1188524).\n- CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).\n","status":"published","published":"2023-04-07T09:06:37Z","modified":"2026-02-04T02:25:36.047316Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2259-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n- CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).\n","status":"published","published":"2023-05-22T07:43:46Z","modified":"2026-02-04T04:08:53.519311Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2360-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n- CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).\n","status":"published","published":"2023-06-02T11:37:50Z","modified":"2026-02-04T02:29:47.962551Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-5698-1","title":"openvswitch vulnerability","description":"It was discovered that Open vSwitch incorrectly handled comparison of\ncertain minimasks. A remote attacker could use this issue to cause Open\nvSwitch to crash, resulting in a denial of service, or possibly execute\narbitrary code.\n","status":"published","published":"2022-10-25T11:23:54Z","modified":"2026-02-10T04:42:49Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5698-2","title":"openvswitch vulnerability","description":"USN-5698-1 fixed a vulnerability in Open. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Open vSwitch incorrectly handled comparison of\n certain minimasks. A remote attacker could use this issue to cause Open\n vSwitch to crash, resulting in a denial of service, or possibly execute\n arbitrary code.\n","status":"published","published":"2022-10-25T12:47:42Z","modified":"2026-06-25T13:31:30.464350124Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}