REDHAT-BUG-1632525: Medium severity Open vSwitch Open vSwitch vulnerability
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofprotoruleinsert in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULEINITIALIZED. This would work for new flows, but for an old flow the rule state is RULEREMOVED. The assertion failure causes an OvS crash.
Upstream Patch:
https://github.com/openvswitch/ovs/commit/0befd1f3745055c32940f5faf9559be6a14395e6
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open vSwitchto a version that resolves this vulnerability.Patch 0befd1f3745055c32940f5faf9559be6a14395e6
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1632525?
The severity of REDHAT-BUG-1632525 is classified as moderate due to potential flow inconsistencies in Open vSwitch.
How do I fix REDHAT-BUG-1632525?
To fix REDHAT-BUG-1632525, you should upgrade Open vSwitch to a version higher than 2.7.6.
What are the affected versions for REDHAT-BUG-1632525?
REDHAT-BUG-1632525 affects Open vSwitch versions from 2.7.x through 2.7.6.
What is the impact of REDHAT-BUG-1632525?
The impact of REDHAT-BUG-1632525 may lead to unexpected behavior when adding flow rules in Open vSwitch.
Is REDHAT-BUG-1632525 a publicly disclosed vulnerability?
Yes, REDHAT-BUG-1632525 has been publicly disclosed and documented in the Red Hat bug tracker.