CVE:CVE-2017-9214
CNNVD:CNNVD-201705-1093
Open vSwitch（OVS）是一款以开源技术作为基础（遵循Apache2.0许可）的多层虚拟交换机产品，它通过编程扩展支持大规模网络自动化，标准的管理接口和协议等。
OvS 2.7.0版本中的lib/ofp-util.c文件的‘ofputil_pull_queue_get_config_reply10’函数存在整数溢出漏洞。攻击者可利用该漏洞造成缓冲区越边界读取。
solution:Upgrade openvswitch openvswitch to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat openstack to a higher version than 6.0,7.0,8,9,10,11,and avoid the version 6.0,7.0,8,9,10,11; Upgrade redhat virtualization to a higher version than 4.1,4.0,and avoid the version 4.1,4.0; Upgrade redhat virtualization_manager to a higher version than 4.1,and avoid the version 4.1