Debian Openvswitch vulnerabilities

CVE-2017-9263 [MEDIUM] CVE-2017-9263: openvswitch - In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, ther... In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. Scope: local bookworm: resolved (fixed in 2.8.1+dfsg1-2) bullseye: resolv

CVE-2018-17204 [MEDIUM] CVE-2018-17204: openvswitch - An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting par... An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an

CVE-2012-3449 [LOW] CVE-2012-3449: openvswitch - Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/... Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files. Scope: local bookworm: resolved (fixed in 1.4.2+git20120612-8) bullseye: resolved (fixed in 1.4.2+git20120612-8) forky: resolved (fixed in 1.