CVE-2022-32166 - CVE House
Back to Database
Status published Unknown CVE-2022-32166

ovs - buffer over-read

Vulnerability Description

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-32166

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Mend Vulnerability Research Team (MVR)

Affected Vendor

Affected Software

ovs
Vulnerable Versions:
v0.90.0, unspecified

Timeline

Official Publish: September 28th, 2022
Last Modified: May 21st, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)