The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0685 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * openvswitch: Out-of-Bounds Read in Organization Specific TLV (CVE-2022-4337)
    * openvswitch: Integer Underflow in Organization Specific TLV (CVE-2022-4338)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2275-1 advisory.

  - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4337)

  - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4338)

  - A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the     datapath flow without the action modifying the IP header. This issue results (for both kernel and     userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for     this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a !=     0 IP protocol that matches this dp flow. (CVE-2023-1668)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5319 advisory.

    Two vulnerabilities were discovered in the LLPD implementation of Open vSwitch, software-based Ethernet     virtual switch, which could result in denial of service. For the stable distribution (bullseye), these     problems have been fixed in version 2.15.0+ds1-2+deb11u2. We recommend that you upgrade your openvswitch     packages. For the detailed security status of openvswitch please refer to its security tracker page at:
    https://security-tracker.debian.org/tracker/openvswitch

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2360-1 advisory.

  - Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP     (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. (CVE-2021-36980)

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

  - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4337)

  - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4338)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
171235	RHEL 8 : openvswitch2.13 (RHSA-2023:0685)	Nessus	Red Hat Local Security Checks	2023/2/9	2024/11/7	critical
176264	SUSE SLES15 Security Update : openvswitch (SUSE-SU-2023:2275-1)	Nessus	SuSE Local Security Checks	2023/5/24	2023/7/14	critical
170048	Debian DSA-5319-1 : openvswitch - security update	Nessus	Debian Local Security Checks	2023/1/14	2025/1/24	critical
176646	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2023:2360-1)	Nessus	SuSE Local Security Checks	2023/6/3	2023/7/14	critical

检测

插件搜索

critical

critical

critical

critical