What’s Vulnerable › Vulnerabilities

CVE-2017-9265

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-29 · updated 2026-06-17
• Weakness: CWE-125

Description

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.

Affected products

• Openvswitch: 2.7.0

References

• https://access.redhat.com/errata/RHSA-2017:2418
• https://access.redhat.com/errata/RHSA-2017:2553
• https://access.redhat.com/errata/RHSA-2017:2648
• https://access.redhat.com/errata/RHSA-2017:2665
• https://access.redhat.com/errata/RHSA-2017:2692
• https://access.redhat.com/errata/RHSA-2017:2698
• https://access.redhat.com/errata/RHSA-2017:2727
• https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332965.html
• https://access.redhat.com/errata/RHSA-2017:2418
• https://access.redhat.com/errata/RHSA-2017:2553
• https://access.redhat.com/errata/RHSA-2017:2648
• https://access.redhat.com/errata/RHSA-2017:2665

Get alerted when CVE-2017-9265 or the next vulnerability affects your stack