CVE Catalog
CVE-2017-1000079
HighSummary
ONOS version 1.9.0, developed by the Linux Foundation, is vulnerable to a DoS attack.
Risk Assessment
An attacker can exploit this vulnerability to disrupt services, leading to system unavailability.
Recommendation
It is recommended to upgrade to the latest version of ONOS to mitigate this vulnerability.
Other vulnerabilities in ONOS 1.9.0
See all- CVE-2017-13763High
ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited.
- CVE-2017-1000080High
ONOS version 1.9.0 allows unauthenticated use of websockets, which may lead to unauthorized access to the system.
- CVE-2017-1000081Critical
ONOS version 1.9.0 is vulnerable to unauthenticated upload of applications (.oar), leading to remote code execution.
Original NVD description (English source)
Linux foundation ONOS 1.9.0 is vulnerable to a DoS.