Approved changes feed: RSS · Atom
cpe:2.3:a:the_linux_foundation:onos:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | The Linux Foundation (334ecfef-7abd-596f-9838-cfb4067aaace) |
|---|---|
| Product | Onos (0b812e86-28d6-5929-99a2-773a95bc64f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1010252 |
vulnerable | 2026-06-08 05:12:21.747522 |
Details available
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: applyFlowRules() and apply() functions in FlowRuleManager.java. The attack vector is: network management and connectivity.
Published: 2019-07-18T17:43:41.000Z
Updated: 2024-08-05T03:07:18.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010250 |
vulnerable | 2026-06-08 05:12:21.742692 |
Details available
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.
Published: 2019-07-18T17:51:49.000Z
Updated: 2024-08-05T03:07:18.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010249 |
vulnerable | 2026-06-08 05:12:21.742358 |
Details available
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.
Published: 2019-07-18T17:53:37.000Z
Updated: 2024-08-05T03:07:18.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010234 |
vulnerable | 2026-06-08 05:12:21.714636 |
Details available
The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is: network connectivity.
Published: 2019-07-22T14:58:04.000Z
Updated: 2024-08-05T03:07:18.488Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.