CVE-2016-10377

In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.
References
Link Resource
https://mail.openvswitch.org/pipermail/ovs-dev/2016-July/319503.html Mailing List Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:openvswitch:openvswitch:2.5.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-05-29 04:29

Updated : 2023-12-10 12:15


NVD link : CVE-2016-10377

Mitre link : CVE-2016-10377

CVE.ORG link : CVE-2016-10377


JSON object : View

Products Affected

openvswitch

  • openvswitch
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer