| Package | Affected versions | Patched versions |
|---|---|---|
| openvswitch | = 2.7.0 | |
| openstack | = 10= 11= 6.0= 7.0= 8= 9 | |
| virtualization | = 4.0= 4.1 | |
| virtualization manager | = 4.1 |
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free