CVE-2024-22563

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 19, 2024
Updated: Jan 25, 2024
CWE ID 401

Summary

CVE-2024-22563 is a newly disclosed vulnerability affecting openvswitch version 2.17.8. This issue is caused by a memory leak in the function xmalloc__ located in openvswitch-2.17.8/lib/util.c. The memory leak can lead to a denial-of-service (DoS) attack, as the software may exhaust available memory resources over time. An attacker could potentially exploit this vulnerability by sending malicious packets to the Open vSwitch instance, causing it to leak memory and eventually leading to a crash or other unwanted behavior. Users are urged to update to the latest version of Open vSwitch to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share