openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5640 advisory.

  - A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     may result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled. (CVE-2023-3966)

  - A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual     machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted     packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary     IP addresses. (CVE-2023-5366)

  - openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in     openvswitch-2.17.8/lib/util.c. (CVE-2024-22563)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:0462-1 advisory.

  - openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in     openvswitch-2.17.8/lib/util.c. (CVE-2024-22563)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0544-1 advisory.

  - openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in     openvswitch-2.17.8/lib/util.c. (CVE-2024-22563)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0553-1 advisory.

  - openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in     openvswitch-2.17.8/lib/util.c. (CVE-2024-22563)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0526-1 advisory.

  - openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in     openvswitch-2.17.8/lib/util.c. (CVE-2024-22563)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0524-1 advisory.

  - openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in     openvswitch-2.17.8/lib/util.c. (CVE-2024-22563)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
192117	Debian dsa-5640 : openvswitch-common - security update	Nessus	Debian Local Security Checks	medium
191051	SUSE SLES15 Security Update : openvswitch (SUSE-SU-2024:0462-1)	Nessus	SuSE Local Security Checks	high
190837	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2024:0544-1)	Nessus	SuSE Local Security Checks	high
190833	SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2024:0553-1)	Nessus	SuSE Local Security Checks	high
190753	SUSE SLES15 Security Update : openvswitch (SUSE-SU-2024:0526-1)	Nessus	SuSE Local Security Checks	high
190751	SUSE SLES15 Security Update : openvswitch (SUSE-SU-2024:0524-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-22563

high

Tenable Plugins

medium

high

high

high

high

high