CVE-2022-32166CWE-125

ovs - buffer over-read

Medium · published September 28, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00606 · 48.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-09-28T09:30Z
EPSS history
Timeline
  • 28 SEP 09:30Z
    ovs - buffer over-read
    cvelistv5