CVE-2018-17204
mediumpriority · track · 18EPSS 0.019 · 80 %ileEURUUSEPSS · scored 2026-10-27
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedredhat-release-virtualization-host-0:4.2-7.5.el7.src as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHBA-2018:3683 - Fixedredhat-release-virtualization-host-0:4.2-7.5.el7.x86_64 as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHBA-2018:3683 - Fixedredhat-virtualization-host-0:4.2-20181121.0.el7_6.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHBA-2018:3683 - Fixedredhat-virtualization-host-image-update-0:4.2-20181121.0.el7_6.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHBA-2018:3683 - Fixedredhat-virtualization-host-image-update-placeholder-0:4.2-7.5.el7.noarch as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHBA-2018:3683 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.src as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.src as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-test-0:2.9.0-70.el7fdp.1.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedpython-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedpython-openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedpython-openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.src as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-debuginfo-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-devel-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-central-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-common-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-host-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-vtep-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-test-0:2.9.0-83.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedpython-openvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.src as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-debuginfo-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-debuginfo-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-central-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-central-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-common-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-common-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-host-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-host-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-vtep-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-vtep-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-test-0:2.9.0-83.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedpython-openvswitch-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedpython-openvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.7–4.3
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (66)
Products and version ranges known to be affected.
advisories (4)
Vendor and ecosystem advisories describing this.
- RHBA-2018:3683Red Hat Bug Fix Advisory: Important: redhat-virtualization-host bug fix and enhancement update2018-11-27csaf · redhat_csafUS
Updated redhat-virtualization-host packages that fix several bugs and add various enhancements are now available.
- RHSA-2018:3500Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update2018-11-05csaf · redhat_csafUS
An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- RHSA-2019:0053Red Hat Security Advisory: openvswitch security and bug fix update2019-01-16csaf · redhat_csafUS
An update for openvswitch is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- RHSA-2019:0081Red Hat Security Advisory: openvswitch security and bug fix update2019-01-16csaf · redhat_csafUS
An update for openvswitch is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (19)
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2018:3500cnnvd
- https://access.redhat.com/errata/RHSA-2019:0053cnnvd
- https://access.redhat.com/errata/RHSA-2019:0081cnnvd
- https://github.com/openvswitch/ovs/commit/4af6da3b275b764b1afe194df6499b33d2bf4cdecnnvd
- https://lists.debian.org/debian-lts-announce/2021/02/msg00032.htmlcnnvd
- https://usn.ubuntu.com/3873-1/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.0639cnnvd
- https://access.redhat.com/errata/RHSA-2018:3500enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan