Open Network Operating System
Approved changes feed: RSS · Atom
cpe:2.3:o:linuxfoundation:open_network_operating_system:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Linuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234) |
|---|---|
| Product | Open Network Operating System (3330caa9-0611-5e97-8fb6-7942f642b12b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/opennetworkinglab/onos |
purl2cpe | 2026-06-01 10:13:21.286090 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1010252 |
vulnerable | 2026-06-08 05:12:21.747562 |
Details available
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: applyFlowRules() and apply() functions in FlowRuleManager.java. The attack vector is: network management and connectivity.
Published: 2019-07-18T17:43:41.000Z
Updated: 2024-08-05T03:07:18.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010250 |
vulnerable | 2026-06-08 05:12:21.742728 |
Details available
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.
Published: 2019-07-18T17:51:49.000Z
Updated: 2024-08-05T03:07:18.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010249 |
vulnerable | 2026-06-08 05:12:21.742396 |
Details available
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.
Published: 2019-07-18T17:53:37.000Z
Updated: 2024-08-05T03:07:18.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010245 |
vulnerable | 2026-06-08 05:12:21.736225 |
Details available
The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The component is: apps/yang/src/main/java/org/onosproject/yang/impl/YangLiveCompilerManager.java. The attack vector is: network connectivity. The fixed version is: 1.15.
Published: 2019-07-19T14:23:36.000Z
Updated: 2024-08-05T03:07:18.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010234 |
vulnerable | 2026-06-08 05:12:21.715379 |
Details available
The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is: network connectivity.
Published: 2019-07-22T14:58:04.000Z
Updated: 2024-08-05T03:07:18.488Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.