Ubuntu Security Notice USN-5890-1: Open vSwitch DoS Vulnerability Risk

ubuntu

February 27, 2023

Several security issues were fixed in Open vSwitch.

Summary

Several security issues were fixed in Open vSwitch.

Software Description:

- openvswitch: Ethernet virtual switch

Details:

Qian Chen discovered that Open vSwitch incorrectly handled certain

Organization Specific TLVs. A remote attacker could use this issue to cause

Open vSwitch to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics Covered

security advisory denial of service software update ubuntu openvswitch

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   openvswitch-common              3.0.3-0ubuntu0.22.10.2

Ubuntu 22.04 LTS:
   openvswitch-common              2.17.3-0ubuntu0.22.04.2

Ubuntu 20.04 LTS:
   openvswitch-common              2.13.8-0ubuntu1.1

Ubuntu 18.04 LTS:
   openvswitch-common              2.9.8-0ubuntu0.18.04.4

In general, a standard system update will make all the necessary changes.