CVE-2018-17204
First published: Wed Sep 19 2018(Updated: )
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openvswitch Openvswitch | >=2.7.0<=2.7.6 | |
| Redhat Openstack | =10 | |
| Redhat Openstack | =13 | |
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =18.04 | |
| Debian Debian Linux | =9.0 | |
| ubuntu/openvswitch | <2.9.2-0ubuntu0.18.04.3 | 2.9.2-0ubuntu0.18.04.3 |
| ubuntu/openvswitch | <2.5.5-0ubuntu0.16.04.2 | 2.5.5-0ubuntu0.16.04.2 |
| debian/openvswitch | 2.10.7+ds1-0+deb10u1 2.10.7+ds1-0+deb10u5 2.15.0+ds1-2+deb11u4 2.15.0+ds1-2+deb11u5 3.1.0-2 3.1.0-2+deb12u1 3.3.0~git20240118.e802fe7-3 3.3.0-4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2018:3500
- https://access.redhat.com/errata/RHSA-2019:0053
- https://access.redhat.com/errata/RHSA-2019:0081
- https://github.com/openvswitch/ovs/commit/4af6da3b275b764b1afe194df6499b33d2bf4cde
- https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html
- https://usn.ubuntu.com/3873-1/
- https://launchpad.net/bugs/cve/CVE-2018-17204
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1632523
- https://access.redhat.com/security/cve/CVE-2018-17204
- https://access.redhat.com/containers/#/registry.access.redhat.com/openshift3/node
- https://access.redhat.com/articles/2176281
- https://bugzilla.redhat.com/show_bug.cgi?id=1632522
- https://github.com/openvswitch/ovs/commit/9740d81d94888cb158fa99a9366fe2b32b3e4aaa
- https://github.com/openvswitch/ovs/commit/8976ea1d680ab7a2d726a50e5666aa8fefd24168
- https://github.com/openvswitch/ovs/commit/fbe37f3ccc819a044a500fb5da13d3e53596c2a7
- https://security-tracker.debian.org/tracker/CVE-2018-17204
- https://ubuntu.com/security/notices/USN-3873-1
- https://www.cve.org/CVERecord?id=CVE-2018-17204
- https://nvd.nist.gov/vuln/detail/CVE-2018-17204
- https://github.com/openvswitch/ovs/commit/0e6eb58f53d63b79d3a8c6936b0ef72cdd082bdb
- https://github.com/openvswitch/ovs/commit/94b443070fea2a15bc4768c35d59d46892cdc901
- https://ubuntu.com/security/CVE-2018-17204
Frequently Asked Questions
What is the severity of CVE-2018-17204?
The severity of CVE-2018-17204 is medium with a CVSS score of 4.3.
What is the affected software for CVE-2018-17204?
The affected software for CVE-2018-17204 includes Open vSwitch versions up to and including 2.7.6, Debian Openvswitch, Redhat Openstack versions 10 and 13, and Canonical Ubuntu Linux versions 16.04 and 18.04.
How do I fix CVE-2018-17204?
To fix CVE-2018-17204, you should update to Open vSwitch version 2.10.7+ds1-0+deb10u1 or later, or version 2.9.2-0ubuntu0.18.04.3 or later.
Where can I find more information about CVE-2018-17204?
You can find more information about CVE-2018-17204 on the Red Hat Security Advisories: RHSA-2018:3500, RHSA-2019:0053, and RHSA-2019:0081.
What is the Common Weakness Enumeration (CWE) identifier for CVE-2018-17204?
The Common Weakness Enumeration (CWE) identifier for CVE-2018-17204 is CWE-617.
- collector/nvd-index
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-17204
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/remedy
- agent/description
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/openvswitch
- canonical/openvswitch openvswitch
- version/openvswitch openvswitch/2.7.0
- version/openvswitch openvswitch/2.7.6
- vendor/redhat
- canonical/redhat openstack
- version/redhat openstack/10
- version/redhat openstack/13
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/18.04
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0
- package-manager/debian
- package-manager/ubuntu