SUSE-SU-2023:2360-1: openvswitch&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2023:2360-1 is a vulnerability in openvswitch&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 02-06-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for openvswitch This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581). - CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865). - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse5 products
- openvswitch&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS< 2.8.10-4.33.1
- openvswitch&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 2.8.10-4.33.1
- openvswitch&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 2.8.10-4.33.1
- openvswitch&distro=SUSE OpenStack Cloud 9< 2.8.10-4.33.1
- openvswitch&distro=SUSE OpenStack Cloud Crowbar 9< 2.8.10-4.33.1
1 vendor · 5 products