The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5698-2 advisory.

    USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04     ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3168 advisory.

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5698-1 advisory.

    It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker     could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4050-1 advisory.

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1795-1 advisory.

  - Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP     (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. (CVE-2021-36980)

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2259-1 advisory.

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

  - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4337)

  - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4338)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2360-1 advisory.

  - Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP     (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. (CVE-2021-36980)

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

  - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4337)

  - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4338)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
166500	Ubuntu 16.04 ESM : Open vSwitch vulnerability (USN-5698-2)	Nessus	Ubuntu Local Security Checks	10/25/2022	8/29/2024	medium
166707	Debian DLA-3168-1 : openvswitch - LTS security update	Nessus	Debian Local Security Checks	10/30/2022	11/8/2023	critical
166499	Ubuntu 18.04 LTS : Open vSwitch vulnerability (USN-5698-1)	Nessus	Ubuntu Local Security Checks	10/25/2022	8/29/2024	medium
167924	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2022:4050-1)	Nessus	SuSE Local Security Checks	11/19/2022	11/8/2023	critical
174023	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2023:1795-1)	Nessus	SuSE Local Security Checks	4/8/2023	7/14/2023	high
176224	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2023:2259-1)	Nessus	SuSE Local Security Checks	5/23/2023	7/14/2023	critical
176646	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2023:2360-1)	Nessus	SuSE Local Security Checks	6/3/2023	7/14/2023	critical

Detections

Analytics

Plugins Search

medium

critical

medium

critical

high

critical

critical