NVD

Id
86555  
Name
CVE-2016-10377  
Description
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-12  
Published
2017-05-29  
Modified Date
2017-06-07  
Seq
2016-10377  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420152 86555 CVE-2017-8221 http://seclists.org/fulldisclosure/2017/Mar/23  View
420153 86555 CVE-2017-8221 https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#cloud  View
420154 86555 CVE-2017-8221 http://seclists.org/fulldisclosure/2017/Mar/23  View
420155 86555 CVE-2017-8221 https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#cloud  View

Related JVN