HIGH 8.2 Microsoft
CVE-2023-1668
A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0 OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow but with an incorrect action possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
Microsoft Security Update 2023-Apr: A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0 OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow but with an incorrect action possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
Affected Products
- cbl2 openvswitch 2.17.5-2 on CBL Mariner 2.0
- azl3 openvswitch 2.17.5-3 on Azure Linux 3.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1668
- https://nvd.nist.gov/vuln/detail/CVE-2023-1668
This high severity vulnerability with a CVSS score of 8.2 was published on 2023-04-11 via Microsoft. Affected: cbl2 openvswitch 2.17.5-2 on CBL Mariner 2.0, azl3 openvswitch 2.17.5-3 on Azure Linux 3.0.
vulnfeed aggregates 8294 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.