Paper/Archive/CVE-2022-4337

CVE-2022-4337

redhat — An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

EPSS 1%CVSS 9.8

critical.is priorityof 100

44

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 72.2.722 × 2014.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Affected

ProductAffectedFixed inSource

openvswitchopenvswitch 3.0.3, openvswitch 2.17.5, openvswitch 2.16.6, openvswitch 2.15.7, openvswitch 2.14.8, openvswitch 2.13.10–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refopenwall.com/lists/oss-security/2022/12/21/4 refmail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html refgithub.com/openvswitch/ovs/pull/405 advisorydebian.org/security/2023/dsa-5319 advisorysecurity.gentoo.org/glsa/202311-16