< back to search

shield Security update for openvswitch
SUSE-SLE-SERVER-12-SP2-2018-229

This update for openvswitch fixes the following issues: * CVE-2017-9263: While parsing an OpenFlow role status message, there is a call to the abort() functio for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (bsc#1041470) * CVE-2017-9265: Buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.(bsc#1041447) * CVE-2017-9214: While parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. (bsc#1040543) * CVE-2017-14970: In lib/ofp-util.c, there are multiple memory leaks while parsing malformed OpenFlow group mod messages.(bsc#1061310)

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 s390x
  • Packages
    openvswitch
    An open source, production quality, multilayer virtual switch
    2.5.1-25.12.7 lock rpm lock src
    openvswitch-switch
    Open vSwitch switch implementations
    2.5.1-25.12.7 lock rpm
SUSE Linux Enterprise Server 12.2 aarch64
  • Packages
    openvswitch
    An open source, production quality, multilayer virtual switch
    2.5.1-25.12.7 lock rpm lock src
    openvswitch-switch
    Open vSwitch switch implementations
    2.5.1-25.12.7 lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le
  • Packages
    openvswitch
    An open source, production quality, multilayer virtual switch
    2.5.1-25.12.7 lock rpm lock src
    openvswitch-switch
    Open vSwitch switch implementations
    2.5.1-25.12.7 lock rpm
SUSE Linux Enterprise Server 12.2 x86_64
  • Packages
    openvswitch
    An open source, production quality, multilayer virtual switch
    2.5.1-25.12.7 lock rpm lock src
    openvswitch-dpdk
    An open source, production quality, multilayer virtual switch (DPDK)
    2.5.1-25.12.8 lock rpm lock src
    openvswitch-dpdk-switch
    Open vSwitch switch implementations (DPDK)
    2.5.1-25.12.8 lock rpm
    openvswitch-switch
    Open vSwitch switch implementations
    2.5.1-25.12.7 lock rpm