CVE-2016-10377: Openvswitch

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.

Affected products

• Openvswitch Openvswitch: version 2.5.0 only

Published 2017-05-29. Last modified 2026-06-17.