REDHAT-BUG-1632522: Medium severity Open vSwitch Open vSwitch vulnerability
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parsegrouppropntrselectionmethod in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVSNOTREACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
Upstream Patch:
https://github.com/openvswitch/ovs/commit/4af6da3b275b764b1afe194df6499b33d2bf4cde
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open vSwitchto a version that resolves this vulnerability.Patch 4af6da3b275b764b1afe194df6499b33d2bf4cde - Configuration
Ensure OpenFlow 1.5 support remains disabled in ovs-vswitchd (do not enable OpenFlow 1.5) until the upstream patch (commit 4af6da3b275b764b1afe194df6499b33d2bf4cde) has been applied.
ovs-vswitchd OpenFlow 1.5 support = disabled
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1632522?
The severity of REDHAT-BUG-1632522 has been classified as moderate.
How do I fix REDHAT-BUG-1632522?
To fix REDHAT-BUG-1632522, update Open vSwitch to version 2.7.7 or later.
Which versions of Open vSwitch are affected by REDHAT-BUG-1632522?
Open vSwitch versions from 2.7.x through 2.7.6 are affected by REDHAT-BUG-1632522.
What components of Open vSwitch are impacted by REDHAT-BUG-1632522?
The vulnerability impacts the parse_group_prop_ntr_selection_method function in lib/ofp-util.c.
Is there a workaround for REDHAT-BUG-1632522?
There is no official workaround for REDHAT-BUG-1632522; updating to a patched version is recommended.