CVE-2019-1010249
18.07.2019, 18:15
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.Enginsight
| Vendor | Product | Version |
|---|---|---|
| linuxfoundation | open_network_operating_system | 𝑥 ≤ 2.0.0 |
𝑥
= Vulnerable software versions