openvswitch openvswitch

Name: openvswitch openvswitch
Brand: openvswitch

productUS

cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

6critical7high8medium1low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-35498US	high7.5	8.03% (95th)	Exploit	2.11.6	2021-02-11	10 versions
CVE-2016-2074US	critical9.8	6.40% (94th)	—	no fix	2016-07-03	5 versions
CVE-2020-27827US	high7.5	3.23% (88th)	—	2.12.2	2021-03-18	9 versions
CVE-2017-9214US	critical9.8	2.89% (87th)	—	no fix	2017-05-23	= 2.7.0
CVE-2017-9265US	critical9.8	2.81% (86th)	—	no fix	2017-05-29	= 2.7.0
CVE-2018-17205US	high7.5	2.53% (85th)	—	no fix	2018-09-19	2.7.0 → 2.7.6
CVE-2017-9264US	critical9.8	2.42% (84th)	—	no fix	2017-05-29	= 2.6.1
CVE-2019-25076US	medium5.8	2.36% (84th)	—	no fix	2022-09-08	2 versions
CVE-2021-3905US	high7.5	2.13% (82nd)	—	2.17.0	2022-08-23	< 2.17.0
CVE-2018-17206US	medium4.9	2.05% (81st)	—	no fix	2018-09-19	2.7.0 → 2.7.6
CVE-2018-17204US	medium4.3	1.91% (80th)	—	no fix	2018-09-19	2.7.0 → 2.7.6
CVE-2022-4338US	critical9.8	1.39% (72nd)	—	2.16.6	2023-01-10	6 versions
CVE-2022-4337US	critical9.8	1.39% (72nd)	—	2.17.5	2023-01-10	6 versions
CVE-2017-14970US	medium5.9	1.24% (69th)	—	no fix	2017-10-02	≤ 2.8.0
CVE-2021-36980US	medium5.5	1.18% (68th)	—	no fix	2021-07-20	2.11.0 → 2.15.0
CVE-2023-3966US	high7.5	1.04% (64th)	—	3.1.0	2024-02-22	< 3.1.0
CVE-2017-9263US	medium6.5	1.01% (63rd)	—	no fix	2017-05-29	= 2.7.0
CVE-2016-10377US	high8.8	0.94% (61st)	—	no fix	2017-05-29	= 2.5.0
CVE-2024-22563US	high7.5	0.57% (47th)	—	no fix	2024-01-19	= 2.17.8
CVE-2023-5366US	medium5.5OT elevated	0.42% (36th)	—	2023-02-28	2023-10-06	< 2023-02-28
CVE-2012-3449US	low3.6	0.35% (28th)	—	no fix	2012-08-07	= 1.4.2
CVE-2022-0669US	medium6.5	0.30% (23rd)	—	no fix	2022-08-29	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-617Reachable Assertion2 CVEs
CWE-772Missing Release of Resource after Effective Lifetime2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan