CVEvulnerability

CVE-2016-10377

8.8 HIGH Published 2017-05-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.

Affected configurations

• openvswitch openvswitch 2.5.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References