Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Open vSwitch 安全漏洞
Vulnerability Description
Open vSwitch（OvS）是一款以开源技术作为基础（遵循Apache2.0许可）的多层虚拟交换机产品，它通过编程扩展支持大规模网络自动化，标准的管理接口和协议等。 OvS 2.6.1版本中的防火墙实现过程中的lib/conntrack.c文件的‘extract_l3_ipv6’、‘extract_l4_tcp’和‘extract_l4_udp’函数存在安全漏洞。远程攻击者可利用该漏洞造成缓冲区越边界读取。
CVSS Information
N/A
Vulnerability Type
N/A