CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-52727

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits...

rimedo-ts 安全漏洞

rimedo-ts is an application of the ONOS project. A security vulnerability exists in Open Networking Foundation SD-RAN Rimedo rimedo-ts version 0.1.1, which stems from an out-of-bounds issue in reader.go...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 is affected by an out-of-bounds array access in the processIndicationFormat1 function. CVE-2023-52724 is rated CVSSv3.1 base 8.1 (HIGH) with network attack vector, low attack complexity, and no user interaction. Veracode corroborates out-of-boun...

CVE-2024-34049

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 is affected by a slice bounds out-of-range panic in reader.go when executing plmnIdString[0:3] and plmnIdString[3:]. The issue arises from improper bounds handling on the plmnIdString slice, which can lead to a crash (reported as DoS in som...

CVE-2023-52727

The CVE concerns Open Networking Foundation's ONOS project, specifically the onos-lib-go component at version 0.10.25, with the root cause in parseAlignBits causing an index out-of-range condition. Reported impacts in multiple sources describe an Out-of-Bounds Read leading to potential Denial of ...

CVE-2024-34049

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...

CVE-2023-52727

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits...

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 is affected by CVE-2023-52726. The issue is an infinite repetition of error processing in the Subscribe function for the subscribed indication stream, which can lead to resource exhaustion (DoS). Exploitation status is not detailed in ...

CVE-2024-34050

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64b216 | uint64b18 | uint64b0" in reader.go...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller open sourced by Open Networking Foundation. for building next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation SD-RAN ONOS onos-lib-go version 0.10.25, which stems from an index out-of-boun...

CVE-2023-52725

Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package...

CVE-2024-34050

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64b216 | uint64b18 | uint64b0" in reader.go...

CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2024-34049

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

Malicious code in @sber-sd/assistant-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82069e81085e1a22a51773833e3b1a9b2b492b06fa5249a27bd12e09c329e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1246 Malicious code in @sber-sd/assistant-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82069e81085e1a22a51773833e3b1a9b2b492b06fa5249a27bd12e09c329e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

franceac.srv264.sd-france.net Cross Site Scripting vulnerability OBB-3902299

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the user interface of the Edge Router microprogramming software for devices in the VMware SD-WAN Edge and VMware SD-WAN Orchestrator software platform for managing programmatically configurable networks allows a perpetrator to execute arbitrary commands.

The vulnerability of the Edge Router user interface of microprogramming software in VMware SD-WAN Edge and the VMware SD-WAN Orchestrator platform for managing programmatically configurable networks is related to the failure to eliminate special elements used in operating systems commands...