open vswitch vulnerabilities and fixes

Recent CVEs affecting open vswitch, with upgrade or downgrade steps. 2 tracked.

Also searched as: openvswitch.

open vswitch has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-04-10. Highest priority: CVE-2023-1668 (score 56/100).

• CVE-2023-1668 HIGH 8.2 UPGRADE MITIGATE A flaw was found in openvswitch (OVS)
• CVE-2022-32166 MEDIUM 6.1 UPGRADE MITIGATE In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c

FAQ

How do I fix open vswitch vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is open vswitch being exploited right now?

None of the tracked open vswitch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which open vswitch CVE should I patch first?

CVE-2023-1668 currently ranks highest (56/100): A flaw was found in openvswitch (OVS).

← Back to latest CVEs