CVE-2023-1668

Name of the Vulnerable Software and Affected Versions openvswitch (affected versions not specified)

Description A flaw was found in openvswitch (OVS) when processing an IP packet with protocol 0. This issue results in installing a datapath flow matching all IP protocols for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow. The vulnerability may allow a remote attacker to access confidential data and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.