CVE-2016-10377: Buffer Overflow
Published May 29, 2017
·Updated
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch.
Affected Software
1 affected component
Openvswitch OpenvSwitch=2.5.0
Remediation
Event History
May 29, 2017
CVE Published
via MITRE·03:52 AM
Data Sourced
via MITRE·03:52 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10377?
CVE-2016-10377 has a medium severity rating as it allows for remote bypass of access control lists.
2
How do I fix CVE-2016-10377?
To fix CVE-2016-10377, upgrade Open vSwitch to a version later than 2.5.0.
3
Which versions of Open vSwitch are affected by CVE-2016-10377?
Open vSwitch version 2.5.0 is specifically affected by CVE-2016-10377.
4
What type of attack does CVE-2016-10377 enable?
CVE-2016-10377 enables a remote attacker to bypass the access control list of the switch.
5
What is the cause of the vulnerability in CVE-2016-10377?
CVE-2016-10377 is caused by an unsigned integer underflow in the miniflow_extract function.