CVE-2017-9214

Name of the Vulnerable Software and Affected Versions Open vSwitch (OvS) version 2.7.0

Description The issue is caused by a buffer over-read due to an unsigned integer underflow in the ofputil pull queue get config reply10 function in lib/ofp-util.c, which occurs while parsing an OFPT QUEUE GET CONFIG REPLY type OFP 1.0 message.

Recommendations For Open vSwitch (OvS) version 2.7.0, consider disabling the ofputil pull queue get config reply10 function as a temporary workaround until a patch is available. Restrict access to the lib/ofp-util.c module to minimize the risk of exploitation. Avoid using the OFPT QUEUE GET CONFIG REPLY type OFP 1.0 message in the affected API endpoint until the issue is resolved.