Detections
Analytics

Alpine: multiple openvswitch packages, py3-openvswitch: security update to 2.17.6-r0

high Tenable Cloud Security Plugin ID 406191

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the
 datapath flow without the action modifying the IP header. This issue results (for both kernel and
 userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for
 this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a !=
 0 IP protocol that matches this dp flow. (CVE-2023-1668)

See Also

https://security.alpinelinux.org/vuln/CVE-2023-1668

Plugin Details

Severity: High

ID: 406191

Version: Revision 1.62

Type: Local

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3.5

Percentile: 51.65

CVSS v2

Risk Factor: High

Base Score: 8.5

Temporal Score: 6.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:C

CVSS Score Source: CVE-2023-1668

CVSS v3

Risk Factor: High

Base Score: 8.2

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/10/2023

Reference Information

CVE: CVE-2023-1668