Beveiligingsadvies

CVE-2016-10377

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-05-29 03:52:00
Laatst bijgewerkt 2024-09-16 18:39:28
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.