Wind River Support Network

HomeDefectsLIN1021-4492

Acknowledged

LIN1021-4492 : Security Advisory - openvswitch - CVE-2022-32166

Created: Oct 7, 2022 Updated: Oct 10, 2022

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

CREATE(Triage):(User=admin) CVE-2022-32166 (https://nvd.nist.gov/vuln/detail/CVE-2022-32166)