Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Open vSwitch 2.6.1 may read past packet data

CVE-2017-9264 · published 9 years ago
Summary

The Open vSwitch software version 2.6.1 can accidentally look beyond the end of a network packet when it tries to examine malformed TCP, UDP or IPv6 traffic. This could allow an attacker on the network to cause the program to crash or behave unexpectedly. Upgrade to a newer Open vSwitch release or apply the vendor's patch to fix the parsing code.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
openvswitch openvswitch 2.6.1
cpe:2.3:a:openvswitch:openvswitch:2.6.1:*:*:*:*:*:*:*
Original advisory text
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `ex...
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published29 May 2017
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-9264 · NVD
Track software like this
Free during beta