openvswitch (SUSE:Linux Enterprise Server 12 SP2-BCL) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP2-BCL package openvswitch, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2022-4337 — CVSS 9.8 (critical): An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
• CVE-2022-4338 — CVSS 9.8 (critical): An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
• CVE-2020-27827 — CVSS 7.5 (high): A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to…
• CVE-2020-35498 — CVSS 7.5 (high): A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send…
• CVE-2022-32166 — CVSS 6.1 (medium): In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function…