漏洞标题
N/A
漏洞描述信息
在Open vSwitch(OvS) 2.7.x 到 2.7.6 期间发现了一个问题，该问题影响了ofproto_rule_insert__在ofproto/ofproto.c中。在打包提交时，打包中添加的流按照顺序应用到ofproto。如果一个流无法添加(例如，流动作是针对不存在的组ID的下一步),OvS试图从相同的打包中恢复成功应用的所有先前的流。这是可能的，因为OvS维护了一个由打包替换的老流的列表。在重新插入老流时，OvS由于对规则状态！= Rule_INITIALized的检查而出现了断言失败。这对于新流来说是有效的，但对于老流来说，规则状态是Rule_REMOVED。断言失败导致OvS崩溃。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Open vSwitch 输入验证漏洞
漏洞描述信息
Open vSwitch（OvS）是一款以开源技术作为基础（遵循Apache2.0许可）的多层虚拟交换机产品，它通过编程扩展支持大规模网络自动化，标准的管理接口和协议等。 OvS 2.7.x版本至2.7.6版本中的ofproto/ofproto.c文件的‘ofproto_rule_insert__’函数存在安全漏洞。攻击者可利用该漏洞造成OvS崩溃（断言失败）。
CVSS信息
N/A
漏洞类别
授权问题