Schwachstellen / CVE-2022-4337

kritisch

CVE-2022-4337

openvswitch: Out-of-Bounds Read in Organization Specific TLV

Veröffentlicht Geändert CWE 125
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, CBL-Mariner, Photon OS. Niedriger laut Red Hat (mittel), Ubuntu (mittel).

Beschreibung

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
CBL-Mariner 1.0openvswitch0:2.15.7-1.cm1
CBL-Mariner 2.0openvswitch0:2.17.5-1.cm2
Photon OS 3.0openvswitch2.12.0-7.ph3
Photon OS 4.0openvswitch, openvswitch-devel, openvswitch-devel-static und 2 weitere2.14.0-12.ph4
Photon OS 5.0openvswitch, openvswitch-devel, openvswitch-devel-static und 2 weitere3.0.2-2.ph5
alpine 3.18openvswitch2.17.5-r0
alpine 3.19openvswitch2.17.5-r0
alpine 3.20openvswitch2.17.5-r0
alpine 3.21openvswitch2.17.5-r0
alpine 3.22openvswitch2.17.5-r0
alpine 3.23openvswitch2.17.5-r0
alpine 3.24openvswitch2.17.5-r0
Alle 53 Einträge aus 26 Quellen zeigen
QuellePaketBehoben in
CBL-Mariner 1.0openvswitch0:2.15.7-1.cm1
CBL-Mariner 2.0openvswitch0:2.17.5-1.cm2
Photon OS 3.0openvswitch2.12.0-7.ph3
Photon OS 4.0openvswitch2.14.0-12.ph4
Photon OS 4.0openvswitch-devel2.14.0-12.ph4
Photon OS 4.0openvswitch-devel-static2.14.0-12.ph4
Photon OS 4.0openvswitch-doc2.14.0-12.ph4
Photon OS 4.0python3-openvswitch2.14.0-12.ph4
Photon OS 5.0openvswitch3.0.2-2.ph5
Photon OS 5.0openvswitch-devel3.0.2-2.ph5
Photon OS 5.0openvswitch-devel-static3.0.2-2.ph5
Photon OS 5.0openvswitch-doc3.0.2-2.ph5
Photon OS 5.0python3-openvswitch3.0.2-2.ph5
alpine 3.18openvswitch2.17.5-r0
alpine 3.19openvswitch2.17.5-r0
alpine 3.20openvswitch2.17.5-r0
alpine 3.21openvswitch2.17.5-r0
alpine 3.22openvswitch2.17.5-r0
alpine 3.23openvswitch2.17.5-r0
alpine 3.24openvswitch2.17.5-r0
alpine edgeopenvswitch2.17.5-r0
debian 10openvswitch2.10.7+ds1-0+deb10u3
debian 11openvswitch2.15.0+ds1-2+deb11u2
debian 12openvswitch3.1.0~git20221212.739bcf2-4
debian 13openvswitch3.1.0~git20221212.739bcf2-4
debian 14openvswitch3.1.0~git20221212.739bcf2-4
echoopenvswitch3.1.0~git20221212.739bcf2-4
Red Hatnetwork-scripts-openvswitch2.11kein Fix angegeben
Red Hatnetwork-scripts-openvswitch2.12kein Fix angegeben
Red Hatopenvswitchkein Fix angegeben
Red Hatopenvswitch-controllerkein Fix angegeben
Red Hatopenvswitch-develkein Fix angegeben
Red Hatopenvswitch-ovn-centralkein Fix angegeben
Red Hatopenvswitch-ovn-commonkein Fix angegeben
Red Hatopenvswitch-ovn-hostkein Fix angegeben
Red Hatopenvswitch-ovn-vtepkein Fix angegeben
Red Hatopenvswitch-testkein Fix angegeben
Red Hatopenvswitch2.11kein Fix angegeben
Red Hatopenvswitch2.11-develkein Fix angegeben
Red Hatopenvswitch2.11-testkein Fix angegeben
Red Hatopenvswitch2.12kein Fix angegeben
Red Hatopenvswitch2.12-develkein Fix angegeben
Red Hatopenvswitch2.12-testkein Fix angegeben
Red Hatpython-openvswitchkein Fix angegeben
Red Hatpython-openvswitch2.11kein Fix angegeben
Red Hatpython3-openvswitch2.11kein Fix angegeben
Red Hatpython3-openvswitch2.12kein Fix angegeben
ubuntu 18.04openvswitch2.9.8-0ubuntu0.18.04.4
ubuntu 18.04-ESMopenvswitch2.9.8-0ubuntu0.18.04.4
ubuntu 20.04openvswitch2.13.8-0ubuntu1.1
ubuntu 20.04-ESMopenvswitch2.13.8-0ubuntu1.1
ubuntu 22.04openvswitch2.17.3-0ubuntu0.22.04.2
ubuntu 22.10openvswitch3.0.3-0ubuntu0.22.10.2

Referenzen

Alle 10 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.