Synopsis

Moderate: openvswitch security, bug fix, and enhancement update

Type/Severity

Security Advisory: Moderate

Topic

An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.

The following packages have been upgraded to a later upstream version: openvswitch (2.7.2). (BZ#1472854)

Security Fix(es):

• An unsigned int wrap around leading to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this flaw to cause a remote DoS. (CVE-2017-9214)
  
• In Open vSwitch (OvS), while parsing an OpenFlow role status message there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (CVE-2017-9263)
  
• A buffer over-read was found in the Open vSwitch (OvS) firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9264)
  
• A buffer over-read flaw was found in Open vSwitch (OvS) while parsing the group mod OpenFlow messages sent from the controller. An attacker could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9265)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Virtualization 4.1 x86_64
• Red Hat Virtualization 4 x86_64
• Red Hat Enterprise Linux Fast Datapath 7 x86_64
• Red Hat Virtualization Manager 4.1 x86_64

Fixes

• BZ - 1456795 - CVE-2017-9214 openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function
• BZ - 1457327 - CVE-2017-9263 openvswitch: Invalid processing of a malicious OpenFlow role status message
• BZ - 1457329 - CVE-2017-9264 openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets
• BZ - 1457335 - CVE-2017-9265 openvswitch: Buffer over-read while parsing the group mod OpenFlow message
• BZ - 1472729 - /usr/lib/ocf/resource.d/ovn/ovndb-servers is missing in the openvswitch.spec file
• BZ - 1472854 - [fdProd] Update OVS to 2.7.2

CVEs

• CVE-2017-9214
• CVE-2017-9263
• CVE-2017-9264
• CVE-2017-9265

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Virtualization 4.1

SRPM
openvswitch-2.7.2-1.git20170719.el7fdp.src.rpm	SHA-256: 15a809f510eccf6af4ae7beaa41196ad012745097f8b3f12aa83061ac994df3b
x86_64
openvswitch-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 43f89d55e4c4fd13dda927564918f49ec2f4ff3a3735bafd0cf608c31374baaa
openvswitch-debuginfo-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: c29ec345b5846be505bf0c84bd699000205ffbe6d749ec1011602d88e6c9495e
openvswitch-devel-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 5c2be3e0ef74e07c7ff76e80be3517210ddf69533586fc8e02dcbf0e5716c65a
openvswitch-ovn-central-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 4e9c12173c1c8a6b7d6f36fdbd49df9e57b0e8f3b9f74bf30e8e8648fa273555
openvswitch-ovn-common-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: cf1b348cd8228c0381e868da4728349c080a58d02fce9ddec83f392bef54c040
openvswitch-ovn-host-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 2d0c6d7f82e9bc364457f0c1f384d3668638594b6428aab6854967fd0800a080
python-openvswitch-2.7.2-1.git20170719.el7fdp.noarch.rpm	SHA-256: 09a747e026641c0211069e30d94c396c511b994945b6231f24354d45777a9658

Red Hat Virtualization 4

SRPM
openvswitch-2.7.2-1.git20170719.el7fdp.src.rpm	SHA-256: 15a809f510eccf6af4ae7beaa41196ad012745097f8b3f12aa83061ac994df3b
x86_64
openvswitch-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 43f89d55e4c4fd13dda927564918f49ec2f4ff3a3735bafd0cf608c31374baaa
openvswitch-debuginfo-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: c29ec345b5846be505bf0c84bd699000205ffbe6d749ec1011602d88e6c9495e
openvswitch-devel-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 5c2be3e0ef74e07c7ff76e80be3517210ddf69533586fc8e02dcbf0e5716c65a
openvswitch-ovn-common-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: cf1b348cd8228c0381e868da4728349c080a58d02fce9ddec83f392bef54c040
openvswitch-ovn-host-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 2d0c6d7f82e9bc364457f0c1f384d3668638594b6428aab6854967fd0800a080
python-openvswitch-2.7.2-1.git20170719.el7fdp.noarch.rpm	SHA-256: 09a747e026641c0211069e30d94c396c511b994945b6231f24354d45777a9658

Red Hat Enterprise Linux Fast Datapath 7

SRPM
openvswitch-2.7.2-1.git20170719.el7fdp.src.rpm	SHA-256: 15a809f510eccf6af4ae7beaa41196ad012745097f8b3f12aa83061ac994df3b
x86_64
openvswitch-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 43f89d55e4c4fd13dda927564918f49ec2f4ff3a3735bafd0cf608c31374baaa
openvswitch-debuginfo-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: c29ec345b5846be505bf0c84bd699000205ffbe6d749ec1011602d88e6c9495e
openvswitch-devel-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 5c2be3e0ef74e07c7ff76e80be3517210ddf69533586fc8e02dcbf0e5716c65a
openvswitch-ovn-central-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 4e9c12173c1c8a6b7d6f36fdbd49df9e57b0e8f3b9f74bf30e8e8648fa273555
openvswitch-ovn-common-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: cf1b348cd8228c0381e868da4728349c080a58d02fce9ddec83f392bef54c040
openvswitch-ovn-docker-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 1e062c8dfa4caab3ceb263d049cd87a266053815e10e03b316df893463dc246b
openvswitch-ovn-host-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 2d0c6d7f82e9bc364457f0c1f384d3668638594b6428aab6854967fd0800a080
openvswitch-ovn-vtep-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 208069532bdf9586a335b58c93889a13e9131acfdb027abcaf0b7405f389b4d7
openvswitch-test-2.7.2-1.git20170719.el7fdp.noarch.rpm	SHA-256: 667bfd9f047cc47b1e95e1f867301e1f78b11b749439b77f34738ecd94a81303
python-openvswitch-2.7.2-1.git20170719.el7fdp.noarch.rpm	SHA-256: 09a747e026641c0211069e30d94c396c511b994945b6231f24354d45777a9658

Red Hat Virtualization Manager 4.1

SRPM
openvswitch-2.7.2-1.git20170719.el7fdp.src.rpm	SHA-256: 15a809f510eccf6af4ae7beaa41196ad012745097f8b3f12aa83061ac994df3b
x86_64
openvswitch-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 43f89d55e4c4fd13dda927564918f49ec2f4ff3a3735bafd0cf608c31374baaa
openvswitch-debuginfo-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: c29ec345b5846be505bf0c84bd699000205ffbe6d749ec1011602d88e6c9495e
openvswitch-devel-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 5c2be3e0ef74e07c7ff76e80be3517210ddf69533586fc8e02dcbf0e5716c65a
openvswitch-ovn-central-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 4e9c12173c1c8a6b7d6f36fdbd49df9e57b0e8f3b9f74bf30e8e8648fa273555
openvswitch-ovn-common-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: cf1b348cd8228c0381e868da4728349c080a58d02fce9ddec83f392bef54c040
openvswitch-ovn-host-2.7.2-1.git20170719.el7fdp.x86_64.rpm	SHA-256: 2d0c6d7f82e9bc364457f0c1f384d3668638594b6428aab6854967fd0800a080
python-openvswitch-2.7.2-1.git20170719.el7fdp.noarch.rpm	SHA-256: 09a747e026641c0211069e30d94c396c511b994945b6231f24354d45777a9658