CVE-2017-9263

Name of the Vulnerable Software and Affected Versions Open vSwitch (OvS) version 2.7.0

Description The issue arises when parsing an OpenFlow role status message, where a call to the abort() function is made for undefined role status reasons in the ofp print role status message function located in lib/ofp-print.c. This could potentially be exploited by a malicious switch to launch a remote Denial of Service (DoS) attack.

Recommendations For Open vSwitch (OvS) version 2.7.0, consider disabling the ofp print role status message function as a temporary workaround until a patch is available to prevent potential exploitation.