Security update for openvswitch SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0311-1 Final 1 1 2018-01-31T10:58:41Z current 2018-01-31T10:58:41Z 2018-01-31T10:58:41Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openvswitch This update for openvswitch fixes the following issues: * CVE-2017-9263: While parsing an OpenFlow role status message, there is a call to the abort() functio for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (bsc#1041470) * CVE-2017-9265: Buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.(bsc#1041447) * CVE-2017-9214: While parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. (bsc#1040543) * CVE-2017-14970: In lib/ofp-util.c, there are multiple memory leaks while parsing malformed OpenFlow group mod messages.(bsc#1061310) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-RPI-12-SP2-2018-229,SUSE-SLE-SERVER-12-SP2-2018-229 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180311-1/ Link for SUSE-SU-2018:0311-1 https://lists.suse.com/pipermail/sle-security-updates/2018-January/003692.html E-Mail link for SUSE-SU-2018:0311-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1040543 SUSE Bug 1040543 https://bugzilla.suse.com/1041447 SUSE Bug 1041447 https://bugzilla.suse.com/1041470 SUSE Bug 1041470 https://bugzilla.suse.com/1061310 SUSE Bug 1061310 https://www.suse.com/security/cve/CVE-2017-14970/ SUSE CVE CVE-2017-14970 page https://www.suse.com/security/cve/CVE-2017-9214/ SUSE CVE CVE-2017-9214 page https://www.suse.com/security/cve/CVE-2017-9263/ SUSE CVE CVE-2017-9263 page https://www.suse.com/security/cve/CVE-2017-9265/ SUSE CVE CVE-2017-9265 page SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-2.5.1-25.12.7 openvswitch-switch-2.5.1-25.12.7 openvswitch-dpdk-2.5.1-25.12.8 openvswitch-dpdk-switch-2.5.1-25.12.8 openvswitch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-dpdk-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-dpdk-switch-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-switch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server 12 SP2 openvswitch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openvswitch-switch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openvswitch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-dpdk-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-dpdk-switch-2.5.1-25.12.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openvswitch-switch-2.5.1-25.12.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table." CVE-2017-14970 SUSE Linux Enterprise Server 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-switch-2.5.1-25.12.7 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180311-1/ https://www.suse.com/security/cve/CVE-2017-14970.html CVE-2017-14970 https://bugzilla.suse.com/1061310 SUSE Bug 1061310 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. CVE-2017-9214 SUSE Linux Enterprise Server 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-switch-2.5.1-25.12.7 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180311-1/ https://www.suse.com/security/cve/CVE-2017-9214.html CVE-2017-9214 https://bugzilla.suse.com/1040543 SUSE Bug 1040543 In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. CVE-2017-9263 SUSE Linux Enterprise Server 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-switch-2.5.1-25.12.7 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180311-1/ https://www.suse.com/security/cve/CVE-2017-9263.html CVE-2017-9263 https://bugzilla.suse.com/1041470 SUSE Bug 1041470 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`. CVE-2017-9265 SUSE Linux Enterprise Server 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openvswitch-switch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-2.5.1-25.12.7 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-dpdk-switch-2.5.1-25.12.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openvswitch-switch-2.5.1-25.12.7 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180311-1/ https://www.suse.com/security/cve/CVE-2017-9265.html CVE-2017-9265 https://bugzilla.suse.com/1041447 SUSE Bug 1041447