CVE-2016-10377

CVE-2016-10377 describes a critical vulnerability in Open vSwitch (OvS) version 2.5.0, where a malformed IP packet can lead to an unsigned integer underflow in the `miniflow_extract` function. This flaw allows an attacker to read past the end of a packet buffer, enabling remote bypass of the switch's access control list. With a CVSS score of 8.8 (High), this vulnerability poses a significant risk, as it is exploitable over the network with low complexity and can result in high impact to confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) or significant community discussion has been observed.