CVE-2017-13763
HighSummary
ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited.
Risk Assessment
Lack of memory allocation limits may lead to DoS attacks, threatening system availability.
Recommendation
It is recommended to upgrade to the latest version of ONOS that implements memory allocation limits.
Other vulnerabilities in ONOS
See all- CVE-2017-1000080High
ONOS version 1.9.0 allows unauthenticated use of websockets, which may lead to unauthorized access to the system.
- CVE-2017-1000079High
ONOS version 1.9.0, developed by the Linux Foundation, is vulnerable to a DoS attack.
- CVE-2017-1000081Critical
ONOS version 1.9.0 is vulnerable to unauthenticated upload of applications (.oar), leading to remote code execution.
Original NVD description (English source)
ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited.