Dear Open vSwitch developers, Reviewing some open issues in Debian I found openvswitch's CVE-2019-25076: https://security-tracker.debian.org/tracker/CVE-2019-25076. Probably my search skills are not good today, but I have been unable to find any information about the status of this issue upstream.
Unfortunately, I don't have access to the paper published at CoNEXT '19 / ACM, so I am probably missing some details. I understand though that the attack surface of this issue is quite limited, and its severity is not important. Under the risk of making a dumb question, may I ask you if there is a plan to fix/mitigate this? Best regards, -- Santiago
signature.asc
Description: PGP signature
_______________________________________________ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss