PT-2020-9815

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the Ethernet VPN application, specifically in the host event listener, which does not handle the event types HOST MOVED and HOST UPDATED. This could lead to...

PT-2020-9811

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the virtual broadband network gateway application, specifically in the host event listener, which does not handle certain event types, including HOST MOVED,...

CVE-2019-16298: Improper Handling of Exceptional Conditions

An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual broadband network gateway application org.onosproject.virtualbng, the host event listener does not handle the following event types: HOSTMOVED, HOSTREMOVED, HOSTUPDATED. In combination with other applications, this...

CVE-2019-16299: Improper Handling of Exceptional Conditions

An issue was discovered in Open Network Operating System ONOS 1.14. In the mobility application org.onosproject.mobility, the host event listener does not handle the following event types: HOSTADDED, HOSTREMOVED, HOSTUPDATED. In combination with other applications, this could lead to the absence ...

PT-2020-9813

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue in the access control application org.onosproject.acl of Open Network Operating System ONOS causes the host event listener to not handle the HOST REMOVED event type. This cou...

PT-2020-9812

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the mobility application org.onosproject.mobility where the host event listener does not handle the event types: HOST ADDED, HOST REMOVED, HOST UPDATED. Thi...

CVE-2019-16300: Improper Handling of Exceptional Conditions

An issue was discovered in Open Network Operating System ONOS 1.14. In the access control application org.onosproject.acl, the host event listener does not handle the following event types: HOSTREMOVED. In combination with other applications, this could lead to the absence of intended code...

PT-2020-9810

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the P4 tutorial application where the host event listener does not handle certain event types, including HOST MOVED, HOST REMOVED, and HOST UPDATED. This...

CVE-2019-16297: Improper Handling of Exceptional Conditions

An issue was discovered in Open Network Operating System ONOS 1.14. In the P4 tutorial application org.onosproject.p4tutorial, the host event listener does not handle the following event types: HOSTMOVED, HOSTREMOVED, HOSTUPDATED. In combination with other applications, this could lead to the...

Cisco Discovery Protocol Denial of Service Vulnerability in Cisco FXOS, IOS XR and NX-OS Software

Cisco NX-OS Software and others are products of Cisco Corporation.Cisco NX-OS Software is a suite of data center-grade operating system software for use in switches.Cisco FXOS Software is a suite of firewall software that runs in Cisco security appliances.Cisco IOS XR is a suite of operating...

Ansible: malicious code could craft filename in nxos_file_copy module

A vulnerability in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues...

Ansible: malicious code could craft filename in nxos_file_copy module

A vulnerability in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues...

Ansible: malicious code could craft filename in nxos_file_copy module

A vulnerability in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues...

Open Network Flow Web Resource Arbitrary Modification

The vulnerability of the createFlow and createFlows functions FlowWebResource.java of the RESTful operating system service of Open Network Operating System is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to arbitrarily modify the settings of the switch...

Cisco IOS XE Neighbor Discovery DoS

The vulnerability of the Neighbor Discovery ND protocol implementation in Cisco IOS XE, IOS XR, NX-OS, and StarOS operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted N...

NX-OS and Cisco IOS XE Electronic Signature Verification

The vulnerability of NX-OS and Cisco IOS XE operating systems is related to errors during the verification of the electronic signature when installing an Open Virtual Appliance OVA image. Exploiting this vulnerability allows a perpetrator to install malware onto a vulnerable device...

Virtual Shell NX-OS Maintenance Failure Emergency Shutdown

The vulnerability of the Virtual Shell VSH service in the NX-OS network operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause an application to terminate abnormally or trigger a service failure remotely...

Cisco NX-OS and Cisco IOS XE Data Forgery Issue Vulnerabilities

Cisco NX-OS Software and IOS XE are both products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.IOS XE is a set of operating systems developed for use with its network devices. Cisco NX-OS and Cisco IOS XE in the data forgery...

CVE-2019-1962

A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service DoS condition on an affected system. The vulnerability is due to insufficient validation of TCP packets...

Linux Foundation ONOS Input Validation Error Vulnerability

ONOS is an open source SDN network operating system from the Linux Foundation in the United States. An input validation error vulnerability exists in Linux Foundation ONOS 2.0.0 and prior versions. The vulnerability originates from a network system or product that does not properly validate...