CVE-2017-9264

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: May 29, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-92659.8In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-CVE-2017-92677.5In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used dur CVE-2017-92686.5In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authentic CVE-2017-92699.8In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to sile CVE-2017-92709.1In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.CVE-2017-92713.3The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxie CVE-2017-92727.5The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack.CVE-2017-92735.3The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes.CVE-2017-92747.8A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPE CVE-2017-92756.1NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.CVE-2017-92766.1Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into th CVE-2017-92777.5The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without