openvswitch (SUSE:Enterprise Storage 7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Enterprise Storage 7 package openvswitch, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2022-4337 — CVSS 9.8 (critical): An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
• CVE-2022-4338 — CVSS 9.8 (critical): An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
• CVE-2023-1668 — CVSS 8.2 (high): A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action…