UBUNTU-CVE-2018-17204

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2018-17204

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-17204.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-17204

Related

Published

2018-09-19T00:00:00Z

Modified

2018-09-19T00:00:00Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator

Summary

[none]

Details

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parsegrouppropntrselectionmethod in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVSNOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.

References

Affected packages

Ubuntu:16.04:LTS / openvswitch

Package

Name: openvswitch
Purl: pkg:deb/ubuntu/openvswitch?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.5-0ubuntu0.16.04.2

Affected versions

2.*

2.4.0-0ubuntu4

2.4.0-0ubuntu5

2.5.0~git20160129.46a88d9-0ubuntu1

2.5.0~git20160219.522aca6-0ubuntu1

2.5.0~git20160219.522aca6-0ubuntu2

2.5.0~git20160219.522aca6-0ubuntu3

2.5.0-0ubuntu1

2.5.2-0ubuntu0.16.04.1

2.5.2-0ubuntu0.16.04.2

2.5.2-0ubuntu0.16.04.3

2.5.4-0ubuntu0.16.04.1

2.5.5-0ubuntu0.16.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-common"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-common-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-dbg"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-ipsec"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-ipsec-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-pki"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-switch"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-switch-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-switch-dpdk"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-switch-dpdk-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-test"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-testcontroller"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-testcontroller-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-vtep"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "openvswitch-vtep-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-central"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-central-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-common"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-common-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-docker"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-docker-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-host"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "ovn-host-dbgsym"
        },
        {
            "binary_version": "2.5.5-0ubuntu0.16.04.2",
            "binary_name": "python-openvswitch"
        }
    ]
}

Ubuntu:18.04:LTS / openvswitch

Package

Name: openvswitch
Purl: pkg:deb/ubuntu/openvswitch?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.9.2-0ubuntu0.18.04.3

Affected versions

2.*

2.8.0-0ubuntu2

2.8.1-0ubuntu2

2.8.1-0ubuntu3

2.9.0~git20180205.5a39582ca-0ubuntu1

2.9.0-0ubuntu1

2.9.2-0ubuntu0.18.04.2

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-common"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-dbg"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-doc"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-pki"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-switch"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-switch-dpdk"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-test"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-testcontroller"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-vtep"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-central"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-common"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-controller-vtep"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-docker"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-host"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "python-openvswitch"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "python3-openvswitch"
        }
    ]
}