CVE-2018-17205
mediumpriority · track · 31EPSS 0.025 · 85 %ileEURUUSEPSS · scored 2026-10-28
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedopenvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.src as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.src as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-test-0:2.9.0-70.el7fdp.1.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedpython-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedpython-openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedpython-openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3500 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.src as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-debuginfo-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-devel-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-central-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-common-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-host-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-ovn-vtep-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-test-0:2.9.0-83.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedpython-openvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0053 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.src as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-debuginfo-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-debuginfo-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-central-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-central-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-common-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-common-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-host-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-host-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-vtep-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-ovn-vtep-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedopenvswitch-test-0:2.9.0-83.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedpython-openvswitch-0:2.9.0-83.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081 - Fixedpython-openvswitch-0:2.9.0-83.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 13.0redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:0081
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.4–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (65)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- RHSA-2018:3500Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update2018-11-05csaf · redhat_csafUS
An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- RHSA-2019:0053Red Hat Security Advisory: openvswitch security and bug fix update2019-01-16csaf · redhat_csafUS
An update for openvswitch is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- RHSA-2019:0081Red Hat Security Advisory: openvswitch security and bug fix update2019-01-16csaf · redhat_csafUS
An update for openvswitch is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (15)
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2018:3500cnnvd
- https://access.redhat.com/errata/RHSA-2019:0053cnnvd
- https://access.redhat.com/errata/RHSA-2019:0081cnnvd
- https://github.com/openvswitch/ovs/commit/0befd1f3745055c32940f5faf9559be6a14395e6cnnvd
- https://usn.ubuntu.com/3873-1/cnnvd
- https://access.redhat.com/errata/RHSA-2018:3500enisa_euvd
- https://access.redhat.com/errata/RHSA-2019:0053enisa_euvd
- https://access.redhat.com/errata/RHSA-2019:0081enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan