USN-3450-1

Dashboard / Vulnerabilities / USN-3450-1

USN-3450-1

Summary: openvswitch vulnerabilities

Details: Bhargava Shastry discovered that Open vSwitch incorrectly handled certain OFP messages. A remote attacker could possibly use this issue to cause Open vSwitch to crash, resulting in a denial of service. (CVE-2017-9214) It was discovered that Open vSwitch incorrectly handled certain OpenFlow role messages. A remote attacker could possibly use this issue to cause Open vSwitch to crash, resulting in a denial of service. (CVE-2017-9263) It was discovered that Open vSwitch incorrectly handled certain malformed packets. A remote attacker could possibly use this issue to cause Open vSwitch to crash, resulting in a denial of service. This issue only affected Ubuntu 17.04. (CVE-2017-9264) It was discovered that Open vSwitch incorrectly handled group mod OpenFlow messages. A remote attacker could possibly use this issue to cause Open vSwitch to crash, resulting in a denial of service. (CVE-2017-9265)

References: https://ubuntu.com/security/notices/USN-3450-1, https://ubuntu.com/security/CVE-2017-9214, https://ubuntu.com/security/CVE-2017-9263, https://ubuntu.com/security/CVE-2017-9264, https://ubuntu.com/security/CVE-2017-9265