CVE-2017-9265

Critical

Published: 29/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in the function `ofputil_pull_ofp15_group_mod` in `lib/ofp-util.c`.

Risk Assessment

An attacker may exploit this vulnerability to read unauthorized data from memory, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to update Open vSwitch to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access.

Original NVD description (English source)

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.