CVE-2018-17204
- State
- Published
- Severity
- Not scored
- Published
- Sep 19, 2018
- Updated
- Aug 5, 2024
- Reserved
- Sep 19, 2018
Description
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2019:0053vendor-advisory
- USN-3873-1vendor-advisory
- RHSA-2018:3500vendor-advisory
- https://github.com/openvswitch/ovs/commit/4af6da3b275b764b1afe194df6499b33d2bf4cde
- RHSA-2019:0081vendor-advisory
- [debian-lts-announce] 20210219 [SECURITY] [DLA 2571-1] openvswitch security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.