CVE-2018-17206

Name of the Vulnerable Software and Affected Versions Open vSwitch (OvS) versions 2.7.x through 2.7.6

Description A buffer over-read issue exists in the decode bundle function inside lib/ofp-actions.c during BUNDLE action decoding. This issue can be exploited by a remote attacker to cause a denial of service.

Recommendations For Open vSwitch (OvS) versions 2.7.x through 2.7.6, consider disabling the decode bundle function as a temporary workaround until a patch is available. Restrict access to the lib/ofp-actions.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.