cbcvebase.
CVE-2016-2074
published 2016-07-03

CVE-2016-2074: Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary…

critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.

Affected

11 ranges
VendorProductVersion rangeFixed in
debianopenvswitch< openvswitch 2.3.0+git20140819-4 (bookworm)openvswitch 2.3.0+git20140819-4 (bookworm)
openvswitchopenvswitch——
openvswitchopenvswitch——
openvswitchopenvswitch——
openvswitchopenvswitch——
openvswitchopenvswitch——
openvswitchopenvswitch>= 0 < 2.3.0+git20140819-42.3.0+git20140819-4
openvswitchopenvswitch>= 0 < 2.3.0+git20140819-42.3.0+git20140819-4
openvswitchopenvswitch>= 0 < 2.3.0+git20140819-42.3.0+git20140819-4
openvswitchopenvswitch>= 0 < 2.3.0+git20140819-42.3.0+git20140819-4
redhatopenshift——

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL