{"id":"UBUNTU-CVE-2016-2074","details":"Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.","modified":"2025-07-16T07:34:09.885522Z","published":"2016-03-28T00:00:00Z","withdrawn":"2025-07-18T16:43:25Z","upstream":["CVE-2016-2074"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2016-2074"},{"type":"REPORT","url":"http://openvswitch.org/pipermail/announce/2016-March/000082.html"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2016-2074"}],"affected":[{"package":{"name":"openvswitch","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/openvswitch@2.0.2-0ubuntu0.14.04.3?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2-0ubuntu0.14.04.3"}]}],"versions":["1.10.2-0ubuntu2","2.0.0-0ubuntu3","2.0.0+git20131203-0ubuntu1","2.0.1+git20140106-0ubuntu1","2.0.1+git20140120-0ubuntu1","2.0.1+git20140120-0ubuntu2","2.0.2-0ubuntu0.14.04.1","2.0.2-0ubuntu0.14.04.2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"openvswitch-common","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-common-dbgsym","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-controller","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-controller-dbgsym","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-datapath-dkms","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-datapath-source","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-dbg","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-ipsec","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-ipsec-dbgsym","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-pki","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-switch","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-switch-dbgsym","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"openvswitch-test","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"ovsdbmonitor","binary_version":"2.0.2-0ubuntu0.14.04.3"},{"binary_name":"python-openvswitch","binary_version":"2.0.2-0ubuntu0.14.04.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-2074.json"}},{"package":{"name":"openvswitch","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/openvswitch@2.5.0-0ubuntu1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-0ubuntu1"}]}],"versions":["2.4.0-0ubuntu4","2.4.0-0ubuntu5","2.5.0~git20160129.46a88d9-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu1","2.5.0~git20160219.522aca6-0ubuntu2","2.5.0~git20160219.522aca6-0ubuntu3"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"openvswitch-common","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-common-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-dbg","binary_version":"2.5.0-0ubuntu1"},{"binary_version":"2.5.0-0ubuntu1","binary_name":"openvswitch-ipsec"},{"binary_name":"openvswitch-ipsec-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-pki","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-switch","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-switch-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-switch-dpdk","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-switch-dpdk-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-test","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-testcontroller","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-testcontroller-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-vtep","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"openvswitch-vtep-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"ovn-central","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"ovn-central-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"ovn-common","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"ovn-common-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"ovn-docker","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"ovn-docker-dbgsym","binary_version":"2.5.0-0ubuntu1"},{"binary_name":"ovn-host","binary_version":"2.5.0-0ubuntu1"},{"binary_version":"2.5.0-0ubuntu1","binary_name":"ovn-host-dbgsym"},{"binary_name":"python-openvswitch","binary_version":"2.5.0-0ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-2074.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"low"}]}