Wind River Support Network

HomeDefectsLIN1019-8891

Acknowledged

LIN1019-8891 : Security Advisory - openvswitch - CVE-2022-32166

Created: Oct 7, 2022 Updated: Oct 10, 2022

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

CREATE(Triage):(User=admin) CVE-2022-32166 (https://nvd.nist.gov/vuln/detail/CVE-2022-32166)