UBUNTU-CVE-2018-17205

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2018-17205
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-17205.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-17205
Related
Published
2018-09-19T00:00:00Z
Modified
2018-09-19T00:00:00Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofprotoruleinsert_ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULEINITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.

References

Affected packages

Ubuntu:18.04:LTS / openvswitch

Package

Name
openvswitch
Purl
pkg:deb/ubuntu/openvswitch?arch=src?distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9.2-0ubuntu0.18.04.3

Affected versions

2.*

2.8.0-0ubuntu2
2.8.1-0ubuntu2
2.8.1-0ubuntu3
2.9.0~git20180205.5a39582ca-0ubuntu1
2.9.0-0ubuntu1
2.9.2-0ubuntu0.18.04.2

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-common"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-dbg"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-doc"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-pki"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-switch"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-switch-dpdk"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-test"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-testcontroller"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "openvswitch-vtep"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-central"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-common"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-controller-vtep"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-docker"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "ovn-host"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "python-openvswitch"
        },
        {
            "binary_version": "2.9.2-0ubuntu0.18.04.3",
            "binary_name": "python3-openvswitch"
        }
    ]
}