Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-10377 →
DEBIAN-CVE-2016-10377
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflow_extract, permitting remote bypass of the access control list enforced by the switch.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
openvswitch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1+git20161123-1"}]}]
Debian:13
openvswitch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1+git20161123-1"}]}]
Debian:14
openvswitch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1+git20161123-1"}]}]
Références
- advisory security-tracker.debian.org