openvswitch

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the…CVE-2020-35498Openvswitch · CVSS 7.5 · 8.0% likely

   CWE-400

2. Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPL…CVE-2016-2074Openvswitch · 6.4% likely

   CWE-119

3. In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the…CVE-2017-9214Openvswitch · 2.9% likely

   CWE-191

4. In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_o…CVE-2017-9265Openvswitch · 2.8% likely

   CWE-125

5. An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are…CVE-2018-17205Openvswitch · 2.5% likely

   CWE-617

6. In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `ext…CVE-2017-9264Openvswitch · 2.4% likely

   CWE-125

7. The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted…CVE-2019-25076Openvswitch · 2.4% likely
8. An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action…CVE-2018-17206Openvswitch · 2.0% likely

   CWE-125

9. An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the g…CVE-2018-17204Openvswitch · 1.9% likely

   CWE-617

10. An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.CVE-2022-4338Openvswitch · 1.4% likely

    CWE-125

11. An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.CVE-2022-4337Openvswitch · 1.4% likely

    CWE-125

12. Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetCVE-2023-3966Openvswitch · CVSS 7.5 · 1.3% likely

    CWE-248

13. In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance…CVE-2017-14970Openvswitch · 1.2% likely

    CWE-772

14. Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENC…CVE-2021-36980Openvswitch · CVSS 5.5 · 1.2% likely

    CWE-416

15. In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_ro…CVE-2017-9263Openvswitch · 1.0% likely

    CWE-20

16. In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the funct…CVE-2016-10377Openvswitch · 0.9% likely

    CWE-119

17. openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.CVE-2024-22563Openvswitch · CVSS 7.5 · 0.6% likely

    CWE-401

18. Openvswitch don't match packets on nd_target fieldCVE-2023-5366Openvswitch · CVSS 7.1 · 0.4% likely

    CWE-345

19. Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local…CVE-2012-3449Openvswitch · 0.3% likely

    CWE-264

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.