Paper/Archive/CVE-2022-4338

CVE-2022-4338

redhat — An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

EPSS 1%CVSS 9.8

critical.is priorityof 100

44

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 72.2.722 × 2014.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Affected

ProductAffectedFixed inSource

openvswitchopenvswitch 3.0.3, openvswitch 2.17.5, openvswitch 2.16.6, openvswitch 2.15.7, openvswitch 2.14.8, openvswitch 2.13.10–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refopenwall.com/lists/oss-security/2022/12/21/4 refmail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html refgithub.com/openvswitch/ovs/pull/405 advisorydebian.org/security/2023/dsa-5319 advisorysecurity.gentoo.org/glsa/202311-16