The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2259-1 advisory.

    - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
    - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
    - CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2274-1 advisory.

    - CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
    - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
    - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0687 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * openvswitch: Out-of-Bounds Read in Organization Specific TLV (CVE-2022-4337)
    * openvswitch: Integer Underflow in Organization Specific TLV (CVE-2022-4338)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0685 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * openvswitch: Out-of-Bounds Read in Organization Specific TLV (CVE-2022-4337)
    * openvswitch: Integer Underflow in Organization Specific TLV (CVE-2022-4338)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2275-1 advisory.

    - CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
    - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
    - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of openvswitch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4338 advisory.

  - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4338)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3253 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3253-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     December 31, 2022                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : openvswitch     Version        : 2.10.7+ds1-0+deb10u3     CVE IDs        : CVE-2022-4337 CVE-2022-4338     Debian Bug     : 1027273

    It was discovered that there was an out-of-bounds read and integer     underflow vulnerability in open vSwitch, a software-based Ethernet     virtual switch.

    For Debian 10 buster, these problems have been fixed in version     2.10.7+ds1-0+deb10u3.

    We recommend that you upgrade your openvswitch packages.

    For the detailed security status of openvswitch please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openvswitch

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0688 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * openvswitch: Out-of-Bounds Read in Organization Specific TLV (CVE-2022-4337)
    * openvswitch: Integer Underflow in Organization Specific TLV (CVE-2022-4338)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2250-1 advisory.

    - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
    - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2255-1 advisory.

    - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
    - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
176224	SUSE SLES12: openvswitch / openvswitch-dpdk / openvswitch-dpdk-switch / etc (SUSE-SU-2023:2259-1)	Nessus	SuSE Local Security Checks	2023/5/23	2026/6/25	critical
176271	SUSE SLES15: libopenvswitch-2_13-0 / libovn-20_03-0 / openvswitch / etc (SUSE-SU-2023:2274-1)	Nessus	SuSE Local Security Checks	2023/5/24	2026/6/25	critical
171231	RHEL 8 : openvswitch2.15 (RHSA-2023:0687)	Nessus	Red Hat Local Security Checks	2023/2/9	2024/11/8	critical
171235	RHEL 8 : openvswitch2.13 (RHSA-2023:0685)	Nessus	Red Hat Local Security Checks	2023/2/9	2024/11/7	critical
176264	SUSE SLES15: libopenvswitch-2_14-0 / libovn-20_06-0 / openvswitch / etc (SUSE-SU-2023:2275-1)	Nessus	SuSE Local Security Checks	2023/5/24	2026/6/25	critical
172949	CBL Mariner 2.0 Security Update: openvswitch (CVE-2022-4338)	Nessus	MarinerOS Local Security Checks	2023/3/20	2025/2/10	critical
169440	Debian dla-3253 : openvswitch-common - security update	Nessus	Debian Local Security Checks	2022/12/31	2025/1/22	critical
171232	RHEL 8 : openvswitch2.17 (RHSA-2023:0688)	Nessus	Red Hat Local Security Checks	2023/2/9	2024/11/7	critical
176142	SUSE SLED15: libopenvswitch-2_14-0 / libovn-20_06-0 / openvswitch / etc (SUSE-SU-2023:2250-1)	Nessus	SuSE Local Security Checks	2023/5/20	2026/6/25	critical
176141	SUSE SLED15: libopenvswitch-2_11-0 / openvswitch-ovn-central / etc (SUSE-SU-2023:2255-1)	Nessus	SuSE Local Security Checks	2023/5/20	2026/6/25	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical