CVE-2017-9265

CRITICAL · CVSS 9.8 EPSS 2.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-05-29 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-9265

Severity

CRITICAL

CVSS

9.8

EPSS

2.81%

Original Filing — NVD Description

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.