CVE-2016-2074 Memory corruption in n/a

Critical 9.8 Published 3 Jul 2016 Updated 5 Aug 2024

Remote attackers can execute arbitrary code on Open vSwitch via crafted MPLS packets due to a buffer overflow in the flow processing logic.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-2074?

CVE-2016-2074 is a critical memory corruption vulnerability in Redhat Openshift, published on 3 Jul 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.

Weakness: CWE-119

Which versions are affected by CVE-2016-2074?

It affects 2 products.

Linux distribution packages (16)

`openvswitch` Red Hat:openshift:3.1::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch-debuginfo` Red Hat:openshift:3.1::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch-devel` Red Hat:openshift:3.1::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch-test` Red Hat:openshift:3.1::el7	All versions	`0:2.4.0-2.el7_2`
`python-openvswitch` Red Hat:openshift:3.1::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch` Red Hat:openstack:5::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch-debuginfo` Red Hat:openstack:5::el7	All versions	`0:2.4.0-2.el7_2`
`python-openvswitch` Red Hat:openstack:5::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch` Red Hat:openstack:6::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch-debuginfo` Red Hat:openstack:6::el7	All versions	`0:2.4.0-2.el7_2`
`python-openvswitch` Red Hat:openstack:6::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch` Red Hat:openstack:7::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch-debuginfo` Red Hat:openstack:7::el7	All versions	`0:2.4.0-2.el7_2`
`openvswitch-dpdk` Red Hat:openstack:7::el7	All versions	`0:2.4.0-0.10346.git97bab959.3.el7_2`
`openvswitch-dpdk-debuginfo` Red Hat:openstack:7::el7	All versions	`0:2.4.0-0.10346.git97bab959.3.el7_2`
`python-openvswitch` Red Hat:openstack:7::el7	All versions	`0:2.4.0-2.el7_2`

Products include Openvswitch Openvswitch, Redhat Openshift.

How do I fix CVE-2016-2074?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2016-2074 being exploited?

There is no known exploitation of CVE-2016-2074 in the wild and no public exploit code.

All Redhat Openshift vulnerabilities

Sources

Also known as DEBIAN-CVE-2016-2074, DSA-3533-1, GHSA-xfh5-4xfg-3g5f, RHSA-2016:0523, RHSA-2016:0524, RHSA-2016:0537 and 1 more.