Skip to main content

Opennetworking

47 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2025-65568 Dec 18, 19:16 HIGH POC This Week

Remote denial-of-service in the omec-project UPF (pfcpiface component, version upf-epc-pfcpiface 2.1.3-dev) lets any endpoint able to reach the N4/PFCP interface crash the user-plane function by sending a malformed PFCP Session Establishment Request. The request carries a CreateFAR IE with an empty or truncated IPv4 address; parseFAR() passes it to ip2int(), which reads past the buffer and triggers a Go index-out-of-range panic (CWE-125). Publicly available exploit references exist via the upstream issue tracker, though EPSS remains low (0.46%) and it is not on CISA KEV.

Buffer Overflow Information Disclosure Upf Opennetworking
NVD GitHub
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-53423 May 29, 18:15 MEDIUM This Month

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Denial Of Service Onos Opennetworking
NVD GitHub
CVSS 3.1
5.6
EPSS
0.1%
CVE-2023-41591 May 29, 18:15 CRITICAL Act Now

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Onos Opennetworking
NVD GitHub
CVSS 3.1
9.8
EPSS
0.3%
CVE-2025-29312 Mar 24, 21:15 CRITICAL POC Act Now

An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Onos Opennetworking
NVD GitHub
CVSS 3.1
9.1
EPSS
0.2%
CVE-2025-29311 Mar 24, 21:15 HIGH This Week

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Onos Opennetworking
NVD GitHub
CVSS 3.1
7.5
EPSS
0.3%
CVE-2025-29310 Mar 24, 21:15 CRITICAL This Week

An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Deserialization Onos Opennetworking
NVD GitHub
CVSS 3.1
9.8
EPSS
0.1%
CVE-2024-48809 Nov 04, 17:15 HIGH POC This Week

An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Onos A1T Sdran In A Box Opennetworking
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-31198 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2024-31197 Sep 18, 14:15 HIGH This Week

Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2024-31196 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31195 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31194 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31193 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31192 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31191 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31190 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31189 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31188 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31187 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31186 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31185 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31184 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31183 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31182 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31181 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31180 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31179 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31178 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31177 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31176 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-31175 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31174 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31173 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31172 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31171 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31170 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31169 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31168 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31167 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31166 Sep 18, 14:15 HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31165 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-31164 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-23916 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-23915 Sep 18, 14:15 HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-24279 Mar 14, 01:15 Maven MEDIUM POC This Month

A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Onos Opennetworking
NVD
CVSS 3.1
6.1
EPSS
0.6%
CVE-2018-1999020 Jul 23, 15:29 MEDIUM POC PATCH This Month

Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Java Path Traversal Onos Opennetworking
NVD
CVSS 3.0
5.5
EPSS
1.3%
CVE-2018-1000155 May 24, 13:29 CRITICAL Act Now

OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath IDentifier) in the features_reply message are inherently. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Denial Of Service Openflow Opennetworking
NVD
CVSS 3.0
9.8
EPSS
1.2%
CVE-2025-65568
EPSS 0% CVSS 7.5
HIGH POC This Week

Remote denial-of-service in the omec-project UPF (pfcpiface component, version upf-epc-pfcpiface 2.1.3-dev) lets any endpoint able to reach the N4/PFCP interface crash the user-plane function by sending a malformed PFCP Session Establishment Request. The request carries a CreateFAR IE with an empty or truncated IPv4 address; parseFAR() passes it to ip2int(), which reads past the buffer and triggers a Go index-out-of-range panic (CWE-125). Publicly available exploit references exist via the upstream issue tracker, though EPSS remains low (0.46%) and it is not on CISA KEV.

Buffer Overflow Information Disclosure Upf +1
NVD GitHub
CVE-2024-53423
EPSS 0% CVSS 5.6
MEDIUM This Month

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Denial Of Service Onos Opennetworking
NVD GitHub
CVE-2023-41591
EPSS 0% CVSS 9.8
CRITICAL Act Now

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Onos Opennetworking
NVD GitHub
CVE-2025-29312
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Onos Opennetworking
NVD GitHub
CVE-2025-29311
EPSS 0% CVSS 7.5
HIGH This Week

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Onos Opennetworking
NVD GitHub
CVE-2025-29310
EPSS 0% CVSS 9.8
CRITICAL This Week

An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Deserialization Onos Opennetworking
NVD GitHub
CVE-2024-48809
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Onos A1T Sdran In A Box +1
NVD GitHub
CVE-2024-31198
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31197
EPSS 0% CVSS 7.5
HIGH This Week

Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Libfluid Msg Opennetworking
NVD
CVE-2024-31196
EPSS 0% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-31195
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31194
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31193
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31192
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31191
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31190
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31189
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31188
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31187
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31186
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31185
EPSS 0% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-31184
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31183
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31182
EPSS 0% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-31181
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31180
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31179
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31178
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31177
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31176
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31175
EPSS 1% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-31174
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31173
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31172
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31171
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31170
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31169
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31168
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31167
EPSS 1% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-31166
EPSS 0% CVSS 7.5
HIGH This Week

Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Libfluid Msg +1
NVD
CVE-2024-31165
EPSS 1% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-31164
EPSS 1% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-23916
EPSS 1% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2024-23915
EPSS 1% CVSS 7.5
HIGH This Week

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libfluid Msg Opennetworking
NVD
CVE-2023-24279 Maven
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Onos Opennetworking
NVD
CVE-2018-1999020
EPSS 1% CVSS 5.5
MEDIUM POC PATCH This Month

Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Java Path Traversal Onos +1
NVD
CVE-2018-1000155
EPSS 1% CVSS 9.8
CRITICAL Act Now

OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath IDentifier) in the features_reply message are inherently. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Denial Of Service Openflow +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy