CVE-2016-2074

Critical

Published: 03/07/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to upgrade Open vSwitch to version 2.3.3 or 2.4.1 to mitigate this vulnerability.

Original NVD description (English source)

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.