Security update for openvswitch SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0505-1 Final 1 1 2018-02-21T08:04:26Z current 2018-02-21T08:04:26Z 2018-02-21T08:04:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openvswitch This update for openvswitch fixes the following issues: * CVE-2017-9263: While parsing an OpenFlow role status message, there is a call to the abort() functio for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (bsc#1041470) * CVE-2017-9265: Buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.(bsc#1041447) * CVE-2017-9214: While parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. (bsc#1040543) * CVE-2017-14970: In lib/ofp-util.c, there are multiple memory leaks while parsing malformed OpenFlow group mod messages.(bsc#1061310) * Do not stop the systemd service on package removals as this can break networking. Moreover, this allows us to easily update to more recent openvswitch releases without connectivity problems (bsc#1050896) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2018-334 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180505-1/ Link for SUSE-SU-2018:0505-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003744.html E-Mail link for SUSE-SU-2018:0505-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1040543 SUSE Bug 1040543 https://bugzilla.suse.com/1041447 SUSE Bug 1041447 https://bugzilla.suse.com/1041470 SUSE Bug 1041470 https://bugzilla.suse.com/1050896 SUSE Bug 1050896 https://bugzilla.suse.com/1061310 SUSE Bug 1061310 https://www.suse.com/security/cve/CVE-2017-14970/ SUSE CVE CVE-2017-14970 page https://www.suse.com/security/cve/CVE-2017-9214/ SUSE CVE CVE-2017-9214 page https://www.suse.com/security/cve/CVE-2017-9263/ SUSE CVE CVE-2017-9263 page https://www.suse.com/security/cve/CVE-2017-9265/ SUSE CVE CVE-2017-9265 page SUSE OpenStack Cloud 6 openvswitch-2.5.1-6.4.7 openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 openvswitch-switch-2.5.1-6.4.7 openvswitch-2.5.1-6.4.7 as a component of SUSE OpenStack Cloud 6 openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 as a component of SUSE OpenStack Cloud 6 openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 as a component of SUSE OpenStack Cloud 6 openvswitch-switch-2.5.1-6.4.7 as a component of SUSE OpenStack Cloud 6 In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table." CVE-2017-14970 SUSE OpenStack Cloud 6:openvswitch-2.5.1-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-switch-2.5.1-6.4.7 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180505-1/ https://www.suse.com/security/cve/CVE-2017-14970.html CVE-2017-14970 https://bugzilla.suse.com/1061310 SUSE Bug 1061310 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. CVE-2017-9214 SUSE OpenStack Cloud 6:openvswitch-2.5.1-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-switch-2.5.1-6.4.7 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180505-1/ https://www.suse.com/security/cve/CVE-2017-9214.html CVE-2017-9214 https://bugzilla.suse.com/1040543 SUSE Bug 1040543 In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. CVE-2017-9263 SUSE OpenStack Cloud 6:openvswitch-2.5.1-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-switch-2.5.1-6.4.7 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180505-1/ https://www.suse.com/security/cve/CVE-2017-9263.html CVE-2017-9263 https://bugzilla.suse.com/1041470 SUSE Bug 1041470 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`. CVE-2017-9265 SUSE OpenStack Cloud 6:openvswitch-2.5.1-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-default-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-kmp-xen-2.5.1_k3.12.74_60.64.69-6.4.7 SUSE OpenStack Cloud 6:openvswitch-switch-2.5.1-6.4.7 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180505-1/ https://www.suse.com/security/cve/CVE-2017-9265.html CVE-2017-9265 https://bugzilla.suse.com/1041447 SUSE Bug 1041447