Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4rhb-vhvc-v3cx
Vulnerability ID VCID-4rhb-vhvc-v3cx
Aliases CVE-2017-9214
Summary openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-190 Integer Overflow or Wraparound
System Score Found at
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
epss 0.0339 https://api.first.org/data/v1/epss?cve=CVE-2017-9214
cvssv2 6.8 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 7.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json
https://api.first.org/data/v1/epss?cve=CVE-2017-9214
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9214
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1456795 https://bugzilla.redhat.com/show_bug.cgi?id=1456795
863228 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863228
RHSA-2017:2418 https://access.redhat.com/errata/RHSA-2017:2418
RHSA-2017:2553 https://access.redhat.com/errata/RHSA-2017:2553
RHSA-2017:2648 https://access.redhat.com/errata/RHSA-2017:2648
RHSA-2017:2665 https://access.redhat.com/errata/RHSA-2017:2665
RHSA-2017:2692 https://access.redhat.com/errata/RHSA-2017:2692
RHSA-2017:2698 https://access.redhat.com/errata/RHSA-2017:2698
RHSA-2017:2727 https://access.redhat.com/errata/RHSA-2017:2727
USN-3450-1 https://usn.ubuntu.com/3450-1/
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.8735
EPSS Score 0.0339
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:30:56.303098+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json 38.0.0