CVE-2017-9214

Critical

Published: 23/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Open vSwitch (OvS) 2.7.0, there is a buffer over-read issue when parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message. This issue is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.

Risk Assessment

An attacker may exploit this vulnerability to read unauthorized data from memory, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to update Open vSwitch to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access.

Original NVD description (English source)

In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.