CVE-2018-17204

CWE-617 — Reachable AssertionCWE-20 — Improper Input Validation10 documents8 sources
Severity
4.3MEDIUM
EPSS
1.1%
top 21.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Openvswitch OpenvswitchCanonical Ubuntu LinuxDebian Debian Linux+1 more
Timeline
PublishedSep 19
Latest updateMay 13

Description

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶Debianopenvswitch< 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-1+3
▶Ubuntuopenvswitch< 2.5.5-0ubuntu0.16.04.2+1
▶NVDopenvswitch/openvswitch2.7.0 — 2.7.6
▶NVDredhat/openstack10, 13+1

Also affects: Debian Linux 9.0, Ubuntu Linux 16.04, 18.04

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-4wv2-475w-c2fw: An issue was discovered in Open vSwitch (OvS) 2↗2022-05-13
▶
OSV
openvswitch vulnerabilities↗2019-01-30
▶
CVEList
CVE-2018-17204: An issue was discovered in Open vSwitch (OvS) 2↗2018-09-19
▶
OSV
CVE-2018-17204: An issue was discovered in Open vSwitch (OvS) 2↗2018-09-19
▶

📋Vendor Advisories

3
Ubuntu
Open vSwitch vulnerabilities↗2019-01-30
▶
Red Hat
openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure↗2018-09-25
▶
Debian
CVE-2018-17204: openvswitch - An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting par...↗2018
▶

💬Community

2
Bugzilla
CVE-2018-17204 openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure↗2018-09-25
▶
Bugzilla
CVE-2018-17204 openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure [openstack-rdo]↗2018-09-25
▶