CVE-2022-4338 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 71%

Affected Products (NVD)

Vendor	Product	Version
openvswitch	openvswitch	𝑥 < 2.13.10
openvswitch	openvswitch	2.14.0 ≤ 𝑥 < 2.14.8
openvswitch	openvswitch	2.15.0 ≤ 𝑥 < 2.15.7
openvswitch	openvswitch	2.16.0 ≤ 𝑥 < 2.16.6
openvswitch	openvswitch	2.17.0 ≤ 𝑥 < 2.17.5
openvswitch	openvswitch	3.0.0 ≤ 𝑥 < 3.0.3
debian	debian_linux	11.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openvswitch

bookworm	3.1.0-2+deb12u1 fixed
bookworm (security)	3.1.0-2+deb12u1 fixed
bullseye	2.15.0+ds1-2+deb11u5 fixed
bullseye (security)	2.15.0+ds1-2+deb11u5 fixed
sid	3.4.0-1 fixed
trixie	3.4.0-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

openvswitch

bionic	Fixed 2.9.8-0ubuntu0.18.04.4 released
focal	Fixed 2.13.8-0ubuntu1.1 released
jammy	Fixed 2.17.3-0ubuntu0.22.04.2 released
kinetic	Fixed 3.0.3-0ubuntu0.22.10.2 released
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	ignored
xenial	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

libopenvswitch-2_11-0

suse enterprise sap 12 SP5	2.11.5-3.15.1 fixed
suse enterprise server 12 SP5	2.11.5-3.15.1 fixed

libopenvswitch-2_13-0

suse enterprise server 15 SP2

2.13.2-150200.9.22.1

fixed

libopenvswitch-2_14-0

suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed

libopenvswitch-2_8-0

suse enterprise server 12 SP4

2.8.10-4.33.1

fixed

libopenvswitch-3_5-0

suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

libovn-20_03-0

suse enterprise server 15 SP2

20.03.1-150200.9.22.1

fixed

libovn-20_06-0

suse enterprise sap 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP3	20.06.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	20.06.2-150400.24.6.1 fixed

libovn-25_03-0

suse enterprise sap 15 SP7	25.03.0-150700.39.4 fixed
suse enterprise server 15 SP7	25.03.0-150700.39.4 fixed

openvswitch

suse enterprise sap 12 SP5	2.11.5-3.15.1 fixed
suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 12 SP4	2.8.10-4.33.1 fixed
suse enterprise server 12 SP5	2.11.5-3.15.1 fixed
suse enterprise server 15 SP2	2.13.2-150200.9.22.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

openvswitch-devel

suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 15 SP2	2.13.2-150200.9.22.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

openvswitch-ipsec

suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 15 SP2	2.13.2-150200.9.22.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

openvswitch-pki

suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 15 SP2	2.13.2-150200.9.22.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

openvswitch-test

suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 15 SP2	2.13.2-150200.9.22.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

openvswitch-vtep

suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 15 SP2	2.13.2-150200.9.22.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

ovn

suse enterprise sap 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	25.03.0-150700.39.4 fixed
suse enterprise server 15 SP2	20.03.1-150200.9.22.1 fixed
suse enterprise server 15 SP3	20.06.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	25.03.0-150700.39.4 fixed

ovn-central

suse enterprise sap 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	25.03.0-150700.39.4 fixed
suse enterprise server 15 SP2	20.03.1-150200.9.22.1 fixed
suse enterprise server 15 SP3	20.06.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	25.03.0-150700.39.4 fixed

ovn-devel

suse enterprise sap 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	25.03.0-150700.39.4 fixed
suse enterprise server 15 SP2	20.03.1-150200.9.22.1 fixed
suse enterprise server 15 SP3	20.06.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	25.03.0-150700.39.4 fixed

ovn-docker

suse enterprise sap 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	25.03.0-150700.39.4 fixed
suse enterprise server 15 SP2	20.03.1-150200.9.22.1 fixed
suse enterprise server 15 SP3	20.06.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	25.03.0-150700.39.4 fixed

ovn-host

suse enterprise sap 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	25.03.0-150700.39.4 fixed
suse enterprise server 15 SP2	20.03.1-150200.9.22.1 fixed
suse enterprise server 15 SP3	20.06.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	25.03.0-150700.39.4 fixed

ovn-vtep

suse enterprise sap 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	25.03.0-150700.39.4 fixed
suse enterprise server 15 SP2	20.03.1-150200.9.22.1 fixed
suse enterprise server 15 SP3	20.06.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	20.06.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	25.03.0-150700.39.4 fixed

python3-ovs

suse enterprise sap 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise sap 15 SP7	3.5.0-150700.39.4 fixed
suse enterprise server 15 SP2	2.13.2-150200.9.22.1 fixed
suse enterprise server 15 SP3	2.14.2-150300.19.8.1 fixed
suse enterprise server 15 SP4	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP5	2.14.2-150400.24.6.1 fixed
suse enterprise server 15 SP7	3.5.0-150700.39.4 fixed

Common Weakness Enumeration

References

https://github.com/openvswitch/ovs/pull/405

https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html

https://security.gentoo.org/glsa/202311-16

https://www.debian.org/security/2023/dsa-5319

https://www.openwall.com/lists/oss-security/2022/12/21/4

https://github.com/openvswitch/ovs/pull/405

https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html

https://security.gentoo.org/glsa/202311-16

https://www.debian.org/security/2023/dsa-5319

https://www.openwall.com/lists/oss-security/2022/12/21/4