In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table."

An update of the openvswitch package has been released.

This update for openvswitch fixes the following issues :

  - CVE-2017-9263: While parsing an OpenFlow role status     message, there is a call to the abort() functio for     undefined role status reasons in the function     `ofp_print_role_status_message` in `lib/ofp-print.c`     that may be leveraged toward a remote DoS attack by a     malicious switch. (bsc#1041470)

  - CVE-2017-9265: Buffer over-read while parsing the group     mod OpenFlow message sent from the controller in     `lib/ofp-util.c` in the function     `ofputil_pull_ofp15_group_mod`.(bsc#1041447)

  - CVE-2017-9214: While parsing an     OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there     is a buffer over-read that is caused by an unsigned     integer underflow in the function     `ofputil_pull_queue_get_config_reply10` in     `lib/ofp-util.c`. (bsc#1040543)

  - CVE-2017-14970: In lib/ofp-util.c, there are multiple     memory leaks while parsing malformed OpenFlow group mod     messages.(bsc#1061310)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Open vSwitch 2.8.1 Includes security fix for CVE-2017-14970

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openvswitch fixes the following issues :

Security issue fixed :

  - CVE-2017-14970: Add upstream patches to fix memory leaks     (bsc#1061310).

Bug fixes :

  - Fix rpmlint warnings (bsc#1057357).

  - Add missing post/postun scriptlets for the ovn-common     sub-package (bsc#1054094).

This update was imported from the SUSE:SLE-12-SP3:Update update project.

This update for openvswitch fixes the following issues: Security issue fixed :

  - CVE-2017-14970: Add upstream patches to fix memory leaks     (bsc#1061310). Bug fixes :

  - Fix rpmlint warnings (bsc#1057357).

  - Add missing post/postun scriptlets for the ovn-common     sub-package (bsc#1054094).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Add a symlink of the OCF script in the OCF resources folder

----

Updated to Open vSwitch 2.7.3 and DPDK 16.11.3 for CVE-2017-14970

----

Security fix for CVE-2017-9263, CVE-2017-9265

----

Updated to Open vSwitch 2.7.1 and DPDK 16.11.2 (#1468234)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
121758	Photon OS 1.0: Openvswitch PHSA-2017-0044	Nessus	PhotonOS Local Security Checks	medium
106555	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2018:0311-1)	Nessus	SuSE Local Security Checks	critical
105813	Fedora 27 : openvswitch (2017-0d225819cf)	Nessus	Fedora Local Security Checks	medium
105239	openSUSE Security Update : openvswitch (openSUSE-2017-1354)	Nessus	SuSE Local Security Checks	medium
105095	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2017:3232-1)	Nessus	SuSE Local Security Checks	medium
103891	Fedora 26 : openvswitch (2017-45625fecca)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2017-14970

medium

Tenable Plugins

medium

critical

medium

medium

medium

critical