In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflow_extract, permitting remote bypass of the access control list enforced by the switch.
| Software | From | Fixed in |
|---|---|---|
| openvswitch / openvswitch | 2.5.0 | 2.5.0.x |