openvswitch openvswitch CVE-2017-9214 vulnerability in Openvswitch and Other Products
Published on May 23, 2017

product logo product logo product logo
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2017-9214

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2017-9214 are published in these products:

 
 
 
 
 

Exploit Probability

EPSS
3.39%
Percentile
87.16%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.