CVE-2017-9214 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-9214 Interim 1 21 2025-05-17T23:47:24Z current 2021-05-30T13:57:02Z 2025-05-17T23:47:24Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-9214 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-January/003692.html E-Mail link for SUSE-SU-2018:0311-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003744.html E-Mail link for SUSE-SU-2018:0505-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 libopenvswitch-2_11-0 libopenvswitch-2_8-0 openvswitch openvswitch-2.5.1-25.12.7 openvswitch-2.5.1-6.4.7 openvswitch-devel openvswitch-dpdk-2.5.1-25.12.8 openvswitch-dpdk-switch-2.5.1-25.12.8 openvswitch-kmp-default openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 openvswitch-kmp-xen openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 openvswitch-switch openvswitch-switch-2.5.1-25.12.7 openvswitch-switch-2.5.1-6.4.7 openvswitch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-dpdk-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-dpdk-switch-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-switch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openvswitch-switch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openvswitch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-dpdk-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-dpdk-switch-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-switch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-2.5.1-6.4.7 as a component of SUSE OpenStack Cloud 6 openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 as a component of SUSE OpenStack Cloud 6 openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 as a component of SUSE OpenStack Cloud 6 openvswitch-switch-2.5.1-6.4.7 as a component of SUSE OpenStack Cloud 6 openvswitch as a component of HPE Helion OpenStack 8 libopenvswitch-2_11-0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openvswitch as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openvswitch-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openvswitch as a component of SUSE Linux Enterprise Server 12 SP2-BCL openvswitch-switch as a component of SUSE Linux Enterprise Server 12 SP2-BCL openvswitch as a component of SUSE Linux Enterprise Server 12 SP3-BCL openvswitch as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS openvswitch as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libopenvswitch-2_8-0 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS openvswitch as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libopenvswitch-2_8-0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openvswitch as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openvswitch as a component of SUSE Linux Enterprise Server 12-LTSS openvswitch-kmp-default as a component of SUSE Linux Enterprise Server 12-LTSS openvswitch-kmp-xen as a component of SUSE Linux Enterprise Server 12-LTSS openvswitch-switch as a component of SUSE Linux Enterprise Server 12-LTSS openvswitch as a component of SUSE Linux Enterprise Server 15-ESPOS libopenvswitch-2_11-0 as a component of SUSE Linux Enterprise Server 15-LTSS openvswitch as a component of SUSE Linux Enterprise Server 15-LTSS openvswitch-devel as a component of SUSE Linux Enterprise Server 15-LTSS openvswitch as a component of SUSE Linux Enterprise Server Teradata 12 SP3 openvswitch as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libopenvswitch-2_8-0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openvswitch as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libopenvswitch-2_11-0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 openvswitch as a component of SUSE Linux Enterprise Server for SAP Applications 15 openvswitch-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 openvswitch as a component of SUSE OpenStack Cloud 8 libopenvswitch-2_8-0 as a component of SUSE OpenStack Cloud 9 openvswitch as a component of SUSE OpenStack Cloud 9 openvswitch as a component of SUSE OpenStack Cloud Crowbar 8 libopenvswitch-2_8-0 as a component of SUSE OpenStack Cloud Crowbar 9 openvswitch as a component of SUSE OpenStack Cloud Crowbar 9 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. CVE-2017-9214 SUSE Linux Enterprise Server 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE OpenStack Cloud 6:openvswitch-2.5.1-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-switch-2.5.1-6.4.7 HPE Helion OpenStack 8:openvswitch SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenvswitch-2_11-0 SUSE Linux Enterprise High Performance Computing 15-LTSS:openvswitch SUSE Linux Enterprise High Performance Computing 15-LTSS:openvswitch-devel SUSE Linux Enterprise Server 12 SP3-BCL:openvswitch SUSE Linux Enterprise Server 12 SP3-ESPOS:openvswitch SUSE Linux Enterprise Server 12 SP3-LTSS:openvswitch SUSE Linux Enterprise Server 12 SP4-ESPOS:libopenvswitch-2_8-0 SUSE Linux Enterprise Server 12 SP4-ESPOS:openvswitch SUSE Linux Enterprise Server 12 SP4-LTSS:libopenvswitch-2_8-0 SUSE Linux Enterprise Server 12 SP4-LTSS:openvswitch SUSE Linux Enterprise Server 12-LTSS:openvswitch SUSE Linux Enterprise Server 12-LTSS:openvswitch-kmp-default SUSE Linux Enterprise Server 12-LTSS:openvswitch-kmp-xen SUSE Linux Enterprise Server 12-LTSS:openvswitch-switch SUSE Linux Enterprise Server 15-ESPOS:openvswitch SUSE Linux Enterprise Server 15-LTSS:libopenvswitch-2_11-0 SUSE Linux Enterprise Server 15-LTSS:openvswitch SUSE Linux Enterprise Server 15-LTSS:openvswitch-devel SUSE Linux Enterprise Server Teradata 12 SP3:openvswitch SUSE Linux Enterprise Server for SAP Applications 12 SP3:openvswitch SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenvswitch-2_8-0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openvswitch SUSE Linux Enterprise Server for SAP Applications 15:libopenvswitch-2_11-0 SUSE Linux Enterprise Server for SAP Applications 15:openvswitch SUSE Linux Enterprise Server for SAP Applications 15:openvswitch-devel SUSE OpenStack Cloud 8:openvswitch SUSE OpenStack Cloud 9:libopenvswitch-2_8-0 SUSE OpenStack Cloud 9:openvswitch SUSE OpenStack Cloud Crowbar 8:openvswitch SUSE OpenStack Cloud Crowbar 9:libopenvswitch-2_8-0 SUSE OpenStack Cloud Crowbar 9:openvswitch important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L