CVE-2022-4338
10.01.2023, 22:15
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
| Vendor | Product | Version |
|---|---|---|
| openvswitch | openvswitch | 𝑥 < 2.13.10 |
| openvswitch | openvswitch | 2.14.0 ≤ 𝑥 < 2.14.8 |
| openvswitch | openvswitch | 2.15.0 ≤ 𝑥 < 2.15.7 |
| openvswitch | openvswitch | 2.16.0 ≤ 𝑥 < 2.16.6 |
| openvswitch | openvswitch | 2.17.0 ≤ 𝑥 < 2.17.5 |
| openvswitch | openvswitch | 3.0.0 ≤ 𝑥 < 3.0.3 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-125 - Out-of-bounds ReadThe software reads data past the end, or before the beginning, of the intended buffer.
- CWE-191 - Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
References