{"id":"CVE-2022-4338","aliases":["ALPINE-CVE-2022-4338","AZL-12953","DEBIAN-CVE-2022-4338","DLA-3253-1","DSA-5319-1","EUVD-2022-51691","GHSA-c3mc-r2x5-rwmf","OESA-2023-1025","OESA-2023-1042","OESA-2023-1043","RHSA-2023:0685","RHSA-2023:0687","RHSA-2023:0688","RHSA-2023:0689","RHSA-2023:0691","SUSE-SU-2023:2250-1","SUSE-SU-2023:2250-2","SUSE-SU-2023:2251-1","SUSE-SU-2023:2255-1","SUSE-SU-2023:2259-1","SUSE-SU-2023:2274-1","SUSE-SU-2023:2275-1","SUSE-SU-2023:2360-1","UBUNTU-CVE-2022-4338","USN-5890-1","openSUSE-SU-2024:12860-1"],"status":"published","title":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01385,"percentile":0.72382,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-191"],"published":"2022-12-31T00:00:00Z","modified":"2026-11-03T08:01:34Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"openvswitch","fixed_in":["2.17.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openvswitch","fixed_in":["2.17.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openvswitch","fixed_in":["2.17.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openvswitch","fixed_in":["2.17.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openvswitch","fixed_in":["2.17.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openvswitch","fixed_in":["2.17.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openvswitch","fixed_in":["2.17.5-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openvswitch","fixed_in":["2.17.5-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openvswitch","fixed_in":["3.1.0~git20221212.739bcf2-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openvswitch","fixed_in":["3.1.0~git20221212.739bcf2-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openvswitch","fixed_in":["3.1.0~git20221212.739bcf2-4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"openvswitch","fixed_in":["2.12.4-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"openvswitch","fixed_in":["2.12.4-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"openvswitch","fixed_in":["2.12.4-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openvswitch","fixed_in":["2.12.4-3.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openvswitch","fixed_in":["2.9.8-0ubuntu0.18.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openvswitch","fixed_in":["2.13.8-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openvswitch","fixed_in":["2.17.3-0ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openvswitch","fixed_in":["3.1.0-12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.0"},{"fixed":"2.17.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.0"},{"fixed":"2.17.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.0"},{"fixed":"2.17.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.0"},{"fixed":"2.17.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.0"},{"fixed":"2.17.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.0"},{"fixed":"2.17.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.0"},{"fixed":"2.17.5-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0~git20221212.739bcf2-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0~git20221212.739bcf2-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0~git20221212.739bcf2-4"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.7+ds1-0+deb10u3"}]}],"versions":["2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12","2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u1","2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u2","2.10.0+2018.08.28+git.8ca7c82b7d+ds1-13","2.10.6+ds1-0+deb10u1","2.10.7+ds1-0+deb10u1","2.10.7+ds1-0+deb10u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0+ds1-2+deb11u2"}]}],"versions":["2.15.0+ds1-2","2.15.0+ds1-2+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.4-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.4-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.4-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.4-3.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-212.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-133.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.17-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.17-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.17-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.17-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.17-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.17-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-71.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.16-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.16-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-111.el8fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"openvswitch2.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"openvswitch2.17-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"openvswitch2.17-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"openvswitch2.17-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"openvswitch2.17-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"openvswitch2.17-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"python3-openvswitch2.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"python3-openvswitch2.17-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-62.el9fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-150100.3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-150100.3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-150100.3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.11-25.34.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openvswitch-dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.11-25.34.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-150200.9.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-150200.9.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-150200.9.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-150200.9.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-150200.9.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.0-0ubuntu4","2.4.0-0ubuntu5","2.5.0~git20160129.46a88d9-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu2","2.5.0~git20160219.522aca6-0ubuntu3","2.5.0-0ubuntu1","2.5.2-0ubuntu0.16.04.1","2.5.2-0ubuntu0.16.04.2","2.5.2-0ubuntu0.16.04.3","2.5.4-0ubuntu0.16.04.1","2.5.5-0ubuntu0.16.04.1","2.5.5-0ubuntu0.16.04.2","2.5.9-0ubuntu0.16.04.2","2.5.9-0ubuntu0.16.04.3","2.5.9-0ubuntu0.16.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-0ubuntu0.18.04.4"}]}],"versions":["2.8.0-0ubuntu2","2.8.1-0ubuntu2","2.8.1-0ubuntu3","2.9.0~git20180205.5a39582ca-0ubuntu1","2.9.0-0ubuntu1","2.9.2-0ubuntu0.18.04.2","2.9.2-0ubuntu0.18.04.3","2.9.5-0ubuntu0.18.04.1","2.9.7-0ubuntu0.18.04.2","2.9.8-0ubuntu0.18.04.2","2.9.8-0ubuntu0.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-0ubuntu1.1"}]}],"versions":["2.12.0-0ubuntu1","2.12.0-0ubuntu2","2.12.1~git20191107.7accd1302-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu2","2.12.90~git20200107.af683565b-0ubuntu3","2.13.0~git20200127.dbdf66c29-0ubuntu2","2.13.0~git20200212.15ae9db33-0ubuntu1","2.13.0~git20200212.15ae9db33-0ubuntu2","2.13.0-0ubuntu1","2.13.1-0ubuntu0.20.04.1","2.13.1-0ubuntu0.20.04.3","2.13.1-0ubuntu0.20.04.4","2.13.3-0ubuntu0.20.04.1","2.13.3-0ubuntu0.20.04.2","2.13.5-0ubuntu1","2.13.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.3-0ubuntu0.22.04.2"}]}],"versions":["2.16.0-0ubuntu2","2.16.0-0ubuntu3","2.16.0-0ubuntu4","2.17.0~git20220105.0d1ffb7-0ubuntu1","2.17.0~git20220118.1b9fd88-0ubuntu1","2.17.0~git20220121.109d024-0ubuntu1","2.17.0-0ubuntu1","2.17.2-0ubuntu0.22.04.1","2.17.2-0ubuntu0.22.04.2","2.17.3-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-0ubuntu0.18.04.4"}]}],"versions":["2.8.0-0ubuntu2","2.8.1-0ubuntu2","2.8.1-0ubuntu3","2.9.0~git20180205.5a39582ca-0ubuntu1","2.9.0-0ubuntu1","2.9.2-0ubuntu0.18.04.2","2.9.2-0ubuntu0.18.04.3","2.9.5-0ubuntu0.18.04.1","2.9.7-0ubuntu0.18.04.2","2.9.8-0ubuntu0.18.04.2","2.9.8-0ubuntu0.18.04.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-0ubuntu1.1"}]}],"versions":["2.12.0-0ubuntu1","2.12.0-0ubuntu2","2.12.1~git20191107.7accd1302-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu2","2.12.90~git20200107.af683565b-0ubuntu3","2.13.0~git20200127.dbdf66c29-0ubuntu2","2.13.0~git20200212.15ae9db33-0ubuntu1","2.13.0~git20200212.15ae9db33-0ubuntu2","2.13.0-0ubuntu1","2.13.1-0ubuntu0.20.04.1","2.13.1-0ubuntu0.20.04.3","2.13.1-0ubuntu0.20.04.4","2.13.3-0ubuntu0.20.04.1","2.13.3-0ubuntu0.20.04.2","2.13.5-0ubuntu1","2.13.8-0ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.3-0ubuntu0.22.04.2"}]}],"versions":["2.16.0-0ubuntu2","2.16.0-0ubuntu3","2.16.0-0ubuntu4","2.17.0~git20220105.0d1ffb7-0ubuntu1","2.17.0~git20220118.1b9fd88-0ubuntu1","2.17.0~git20220121.109d024-0ubuntu1","2.17.0-0ubuntu1","2.17.2-0ubuntu0.22.04.1","2.17.2-0ubuntu0.22.04.2","2.17.3-0ubuntu0.22.04.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-12.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openvswitch","product":"openvswitch"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2022/12/21/4","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html","tags":["x_transferred","Mailing List","Patch","Vendor Advisory","web","article","report"]},{"url":"https://github.com/openvswitch/ovs/pull/405","tags":["x_transferred","Patch","Third Party Advisory","fix","article"]},{"url":"https://www.debian.org/security/2023/dsa-5319","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202311-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4338","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-c3mc-r2x5-rwmf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-4338","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4338.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-4338","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1025","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1042","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1043","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0685","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162023","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0685.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4337","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4338","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0687","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162030","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0687.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0688","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162034","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0688.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0689","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162031","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0689.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0691","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162035","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0691.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232250-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206580","tags":["report"]},{"url":"https://bugzilla.suse.com/1206581","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4338","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232250-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232251-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232255-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232259-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203865","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32166","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232274-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210054","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1668","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232275-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188524","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36980","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-4338","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/12/20/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5890-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-4337","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-4338","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T00:00:00Z","modified":"2024-08-03T01:34:50.066Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:34:37.932195Z"}],"euvd":[{"id":"EUVD-2022-51691","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T00:00:00Z","modified":"2024-08-03T01:34:50Z","updated_at":"2026-11-03T03:25:56.529973Z"}],"ghsa":[{"id":"GHSA-c3mc-r2x5-rwmf","title":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-11T00:30:48Z","modified":"2023-11-26T12:30:23Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125","CWE-191"],"updated_at":"2026-11-02T14:55:06.860566Z"}],"nvd":[{"id":"CVE-2022-4338","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T22:15:14.007Z","modified":"2026-06-17T05:20:37.77Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-125","CWE-191"],"updated_at":"2026-11-02T14:07:35.157734Z"}],"osv":[{"id":"ALPINE-CVE-2022-4338","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T22:15:14.007Z","modified":"2026-11-03T07:31:26.107487295Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-12953","title":"CVE-2022-4338 affecting package openvswitch for versions less than 2.17.5-1","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T22:15:14Z","modified":"2026-04-21T04:22:28.903825Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"DEBIAN-CVE-2022-4338","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T22:15:14.007Z","modified":"2026-11-03T08:01:34.901794116Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2023-1025","title":"openvswitch security update","description":"Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.(CVE-2022-4338)","status":"published","published":"2023-01-13T11:05:30Z","modified":"2026-08-18T01:17:29.796802308Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1042","title":"openvswitch security update","description":"Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.(CVE-2022-4338)","status":"published","published":"2023-01-20T11:05:31Z","modified":"2026-08-18T01:17:29.344236181Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1043","title":"openvswitch security update","description":"Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.(CVE-2022-4338)","status":"published","published":"2023-01-20T11:05:31Z","modified":"2026-08-18T01:17:28.539644616Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:0685","title":"Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update","status":"published","published":"2024-09-13T21:06:49Z","modified":"2026-06-29T10:45:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0687","title":"Red Hat Security Advisory: openvswitch2.15 security, bug fix and enhancement update","status":"published","published":"2024-09-13T21:06:20Z","modified":"2026-06-29T10:45:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0688","title":"Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update","status":"published","published":"2024-09-13T21:06:39Z","modified":"2026-06-29T10:45:59Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0689","title":"Red Hat Security Advisory: openvswitch2.16 security, bug fix and enhancement update","status":"published","published":"2024-09-13T21:06:29Z","modified":"2026-06-29T10:45:59Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0691","title":"Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update","status":"published","published":"2024-09-13T21:06:58Z","modified":"2026-06-29T10:46:00Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2022-4338","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T22:15:00Z","modified":"2026-02-04T04:07:35.512076Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"CVE-2022-4338","description":"An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.","status":"published","published":"2023-01-10T00:00:00Z","modified":"2026-10-28T02:30:36.291249971Z","cwes":["CWE-125"],"updated_at":"2026-11-02T15:44:27.186787Z"},{"id":"DLA-3253-1","title":"openvswitch - security update","status":"published","published":"2022-12-31T00:00:00Z","modified":"2026-03-09T01:19:46.718216Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5319-1","title":"openvswitch - security update","status":"published","published":"2023-01-13T00:00:00Z","modified":"2026-03-09T02:09:02.048082Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:12860-1","title":"libopenvswitch-3_1-0-3.1.0-12.1 on GA media","description":"These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-12.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:55:36.742218Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:2250-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n","status":"published","published":"2023-05-19T09:10:39Z","modified":"2026-02-04T04:31:59.971547Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2250-2","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n","status":"published","published":"2023-07-17T12:27:09Z","modified":"2025-05-02T04:33:46.187559Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2251-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n","status":"published","published":"2023-05-19T09:29:04Z","modified":"2026-02-04T03:46:37.585866Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2255-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n","status":"published","published":"2023-05-19T13:22:35Z","modified":"2026-02-04T02:34:26.831262Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2259-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n- CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).\n","status":"published","published":"2023-05-22T07:43:46Z","modified":"2026-02-04T04:08:53.519311Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2274-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n","status":"published","published":"2023-05-23T13:44:30Z","modified":"2026-02-04T03:40:16.134411Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2275-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n","status":"published","published":"2023-05-23T15:42:28Z","modified":"2026-02-04T02:34:05.085705Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2360-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n- CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).\n","status":"published","published":"2023-06-02T11:37:50Z","modified":"2026-02-04T02:29:47.962551Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-5890-1","title":"openvswitch vulnerabilities","description":"Qian Chen discovered that Open vSwitch incorrectly handled certain\nOrganization Specific TLVs. A remote attacker could use this issue to cause\nOpen vSwitch to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2023-02-27T12:24:28Z","modified":"2026-04-27T16:32:41.585373Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}