CVE-2017-14970 - CVE House
Back to Database
Status published Medium CVE-2017-14970

In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are...

Vulnerability Description

In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-14970

Credits & Attribution

No credits recorded in the NVD database.

References

More from openvswitch

View All →
CVE-2021-36980
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free...
Unknown 0
CVE-2019-25076
The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x...
Medium 5.8
CVE-2018-17206
An issue was discovered in Open vSwitch (OvS) 2.7.x through...
Medium 4.9
CVE-2018-17205
An issue was discovered in Open vSwitch (OvS) 2.7.x through...
High 7.5
CVE-2018-17204
An issue was discovered in Open vSwitch (OvS) 2.7.x through...
Medium 4.3

Affected Vendor

openvswitch

View all reports →

Affected Software

openvswitch
Vulnerable Versions:
0

Timeline

Official Publish: October 1st, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.