View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-10377 medium priority: Ubuntu including 1 source packages (openvswitch), 5 status rows across 5 suites (trusty, upstream, xenial, yakkety, zesty): not-affected 3, DNE 1, released 1.
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.