[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUyRs5MuYY0ACa5dlt7sAGA0svj-QlElOpIAmv4g6TCQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":78,"topProductsByCves":79,"seoMetadata":81,"meta":90},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},23130,"openvswitch",1,22,0,180,"2024-02-22","o",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},123467,"Openvswitch is a technology vendor with 1 tracked product and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,37,42,47,52,57,61,68,73],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2020-35498","A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.","2021-02-11",7.5,"v3.1","High",false,0.08026,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":36},"CVE-2016-2074","Buffer overflow in lib\u002Fflow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.","2016-07-03",9.8,"v3.0","Critical",0.06399,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":41},"CVE-2020-27827","A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.","2021-03-18",0.03235,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":33,"cvssVersion":25,"severity":35,"isKev":27,"epssScore":46},"CVE-2017-9214","In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib\u002Fofp-util.c`.","2017-05-23",0.02887,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":51},"CVE-2017-9265","In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib\u002Fofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.","2017-05-29",0.02809,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":24,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":56},"CVE-2018-17205","An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto\u002Fofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.","2018-09-19",0.02531,{"cveId":58,"description":59,"publishedDate":50,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":60},"CVE-2017-9264","In lib\u002Fconntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.",0.02415,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":25,"severity":66,"isKev":27,"epssScore":67},"CVE-2019-25076","The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka a Tuple Space Explosion (TSE) attack.","2022-09-08",5.8,"Medium",0.02338,{"cveId":69,"description":70,"publishedDate":55,"cvssScore":71,"cvssVersion":25,"severity":66,"isKev":27,"epssScore":72},"CVE-2018-17206","An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib\u002Fofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.",4.9,0.02046,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":77},"CVE-2021-3905","A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.","2022-08-23",0.01992,[],[80],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Openvswitch - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openvswitch covering 1 product with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openvswitch vulnerabilities, Openvswitch security, Openvswitch CVE, Openvswitch threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":86,"@type":87,"name":88,"description":83,"url":89},"https:\u002F\u002Fschema.org","Organization","Openvswitch","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenvswitch",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":91,"apiVersion":92},"2026-10-17T13:19:16.134Z","3.0"]