Skip to content
Fencer Intel
medium 5.9

CVE-2017-14970 json

In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages.

published 2017-10-01 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-6446

cvss
5.9
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.2%
EPSS 1.2% chance of exploitation in 30 days, percentile 69%
public exploits
0
none known

Summary

In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table."

Patch / fix

  • openvswitch Debian 14, Debian 13, Debian 12 2.8.1+dfsg1-2

debian advisories DEBIAN-CVE-2017-14970

  • openvswitch OpenStack Cloud 6 2.5.1-6.4.7
  • openvswitch SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2, SLES 12 SP2 2.5.1-25.12.7
  • openvswitch-dpdk SLES for SAP 12 SP2, SLES 12 SP2 2.5.1-25.12.8
  • openvswitch SLES for SAP 12 SP3, SLES 12 SP3 2.7.0-3.10.1

suse advisories SUSE-SU-2018:0505-1SUSE-SU-2018:0311-1SUSE-SU-2017:3232-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-14970 updated cvss 2.2

openvswitch: Multiple memory leaks in lib/ofp-util.c while parsing malformed OpenFlow group mod messages

  • Red Hat Fast Datapath for RHEL 7 openvswitch, openvswitch-test, python-openvswitch, openvswitch-ovn-host, openvswitch-ovn-vtep, openvswitch-ovn-common, +2 more Red Hat Enterprise Linux OpenStack Platform 6 (Juno) openvswitch Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) openvswitch, openvswitch-test, python-openvswitch Red Hat OpenShift Enterprise 3 openvswitch, openvswitch-test, python-openvswitch Red Hat OpenStack Platform 8 (Liberty) openvswitch, python-openvswitch Red Hat OpenStack Platform 9 (Mitaka) openvswitch, python-openvswitch
    +4 more products
    Red Hat OpenStack Platform 10 (Newton) openvswitch, openvswitch-test, python-openvswitch, openvswitch-ovn-host, openvswitch-ovn-vtep, openvswitch-ovn-common, +2 more Red Hat OpenStack Platform 11 (Ocata) openvswitch Red Hat OpenStack Platform 12 (Pike) openvswitch, openvswitch-test, python-openvswitch, openvswitch-ovn-host, openvswitch-ovn-vtep, openvswitch-ovn-common, +1 more Red Hat Virtualization 4 openvswitch, openvswitch-test, python-openvswitch, openvswitch-ovn-host, openvswitch-ovn-vtep, openvswitch-ovn-common, +1 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.24% chance of exploitation in the next 30 days, higher than 69% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-772 Missing Release of Resource after Effective Lifetime

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.