CVE-2018-17205
First published: Wed Sep 19 2018(Updated: )
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openvswitch Openvswitch | >=2.7.0<=2.7.6 | |
| Redhat Openstack | =10 | |
| Redhat Openstack | =13 | |
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =18.04 | |
| debian/openvswitch | 2.15.0+ds1-2+deb11u5 3.1.0-2+deb12u1 3.4.0-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2018:3500
- https://access.redhat.com/errata/RHSA-2019:0053
- https://access.redhat.com/errata/RHSA-2019:0081
- https://github.com/openvswitch/ovs/commit/0befd1f3745055c32940f5faf9559be6a14395e6
- https://usn.ubuntu.com/3873-1/
- https://launchpad.net/bugs/cve/CVE-2018-17205
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1632526
- https://access.redhat.com/security/cve/CVE-2018-17205
- https://access.redhat.com/containers/#/registry.access.redhat.com/openshift3/node
- https://access.redhat.com/articles/2176281
- https://bugzilla.redhat.com/show_bug.cgi?id=1632525
- https://github.com/openvswitch/ovs/commit/9a0ac025de9303334688ff08f01fc08604d2f624
- https://github.com/openvswitch/ovs/commit/638d406e3b647359f3d82189d7a6ee56b4a54928
- https://security-tracker.debian.org/tracker/CVE-2018-17205
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17205
- https://nvd.nist.gov/vuln/detail/CVE-2018-17205
- https://ubuntu.com/security/CVE-2018-17205
Frequently Asked Questions
What is CVE-2018-17205?
CVE-2018-17205 is a vulnerability in Open vSwitch (OvS) 2.7.x through 2.7.6 affecting ofproto_rule_insert__ function in ofproto/ofproto.c.
How does CVE-2018-17205 affect Open vSwitch?
CVE-2018-17205 affects Open vSwitch by allowing attackers to add malicious flow actions that can cause denial of service or other impact.
What is the severity of CVE-2018-17205?
The severity of CVE-2018-17205 is high, with a CVSS score of 7.5.
How can I fix CVE-2018-17205?
To fix CVE-2018-17205, update Open vSwitch to version 2.10.7, 2.15.0, 3.1.0, or 3.2.0 for Debian, or version 2.9.2 for Ubuntu 18.04.
Where can I find more information about CVE-2018-17205?
You can find more information about CVE-2018-17205 in the following references: [Red Hat Security Advisory RHSA-2018:3500](https://access.redhat.com/errata/RHSA-2018:3500), [Red Hat Security Advisory RHSA-2019:0053](https://access.redhat.com/errata/RHSA-2019:0053), [Red Hat Security Advisory RHSA-2019:0081](https://access.redhat.com/errata/RHSA-2019:0081).
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-17205
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- agent/description
- agent/remedy
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/openvswitch
- canonical/openvswitch openvswitch
- version/openvswitch openvswitch/2.7.0
- version/openvswitch openvswitch/2.7.6
- vendor/redhat
- canonical/redhat openstack
- version/redhat openstack/10
- version/redhat openstack/13
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/18.04
- package-manager/debian