In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2360-1 advisory.

  - Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP     (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. (CVE-2021-36980)

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

  - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4337)

  - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4338)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2259-1 advisory.

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

  - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4337)

  - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
    (CVE-2022-4338)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1795-1 advisory.

  - Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP     (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. (CVE-2021-36980)

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4050-1 advisory.

  - In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe     comparison of minimasks function could lead access to an unmapped region of memory. This vulnerability     is capable of crashing the software, memory modification, and possible remote execution. (CVE-2022-32166)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3168 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3168-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     October 29, 2022                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : openvswitch     Version        : 2.10.7+ds1-0+deb10u2     CVE ID         : CVE-2022-32166


    An issue has been found in openvswitch, a software-based,  Ethernet     virtual switch.


    This issue is about a heap buffer over-read in flow.c, which could lead     to access to an unmapped region of memory. This could result in crashing     the software, memory modification, or possible remote execution.



    For Debian 10 buster, this problem has been fixed in version     2.10.7+ds1-0+deb10u2.


    We recommend that you upgrade your openvswitch packages.

    For the detailed security status of openvswitch please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openvswitch

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5698-2 advisory.

    USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04     ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5698-1 advisory.

    It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker     could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
224731	Linux Distros Unpatched Vulnerability : CVE-2022-32166	Nessus	Misc.	medium
176646	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2023:2360-1)	Nessus	SuSE Local Security Checks	critical
176224	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2023:2259-1)	Nessus	SuSE Local Security Checks	critical
174023	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2023:1795-1)	Nessus	SuSE Local Security Checks	medium
167924	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2022:4050-1)	Nessus	SuSE Local Security Checks	medium
166707	Debian dla-3168 : openvswitch-common - security update	Nessus	Debian Local Security Checks	medium
166500	Ubuntu 16.04 ESM : Open vSwitch vulnerability (USN-5698-2)	Nessus	Ubuntu Local Security Checks	medium
166499	Ubuntu 18.04 LTS : Open vSwitch vulnerability (USN-5698-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2022-32166

medium

Tenable Plugins

medium

critical

critical

medium

medium

medium

medium

medium