View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-9263 severity moderate: SUSE including 13 source package names (libopenvswitch-2_11-0, libopenvswitch-2_8-0, …), 36 product×package rows across 15 product lines (SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Server 12 SP2, … (15 product lines)): Known Not Affected 20, Fixed 16.
In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.