Description (CNA)
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / openvswitch | affected openvswitch 3.0.3, openvswitch 2.17.5, openvswitch 2.16.6, openvswitch 2.15.7, openvswitch 2.14.8, openvswitch 2.13.10 |
CWE
CWE-125
References
- https://www.openwall.com/lists/oss-security/2022/12/21/4
- https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html
- https://github.com/openvswitch/ovs/pull/405
- https://www.debian.org/security/2023/dsa-5319
- https://security.gentoo.org/glsa/202311-16
ADP enrichment
No English description supplied.