CVE-2023-1668

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

• CWE-670
• CWE-670

• https://bugzilla.redhat.com/show_bug.cgi?id=2137666Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/05/msg00000.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2GUNS3WSJG4TUDKZ5L7FXGJMVOD6EJZ/
• https://security.gentoo.org/glsa/202311-16
• https://www.debian.org/security/2023/dsa-5387Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/04/06/1Mailing List, Mitigation, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=2137666Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/05/msg00000.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2GUNS3WSJG4TUDKZ5L7FXGJMVOD6EJZ/
• https://security.gentoo.org/glsa/202311-16
• https://www.debian.org/security/2023/dsa-5387Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/04/06/1Mailing List, Mitigation, Patch

Published

Apr 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1661The Display post meta, term meta, comment meta, and user met…5.4
• CVE-2023-1663Coverity versions prior to 2023.3.2 are vulnerable to forced…5.3
• CVE-2023-1664A flaw was found in Keycloak. This flaw depends on a non-def…6.5
• CVE-2023-1665Improper Restriction of Excessive Authentication Attempts in…9.8
• CVE-2023-1666A vulnerability has been found in SourceCodester Automatic Q…9.8
• CVE-2023-1667A NULL pointer dereference was found In libssh during re-key…6.5
• CVE-2023-1669The SEOPress WordPress plugin before 6.5.0.3 unserializes us…7.2
• CVE-2023-1670A flaw use after free in the Linux kernel Xircom 16-bit PCMC…7.8
• CVE-2023-1671A pre-auth command injection vulnerability in the warn-proce…9.8
• CVE-2023-1672A race condition exists in the Tang server functionality for…5.3
• CVE-2023-1673Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2023-1674A vulnerability was found in SourceCodester School Registrat…9.8