CVE-2019-16298

EUVD-2019-7092
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
linuxfoundationopen_network_operating_system
1.14.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf