Multiple denial of service vulnerabilites have been found in Open vSwitch.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/openvswitch | * | < 2.17.6 | >= 2.17.6 |
Open vSwitch is a production quality multilayer virtual switch.
Multiple vulnerabilities have been discovered in Open vSwitch. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Open vSwitch users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/openvswitch-2.17.6"
A buffer overflow in Open vSwitch might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/openvswitch | * | < 2.5.0 | >= 2.5.0 |
Open vSwitch is a production quality multilayer virtual switch.
A buffer overflow was discovered in lib/flow.c in ovs-vswitchd.
A remote attacker, using a specially crafted MPLS packet, could execute arbitrary code.
There is no known workaround at this time.
All Open vSwitch users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/openvswitch-2.5.0"