The vulnerability of the createFlow() and createFlows() functions (FlowWebResource.java) of the RESTful operating system-based service of Open Network Operating System allows a hacker to arbitrarily modify the settings of the switch.

The vulnerability of the createFlow and createFlows functions FlowWebResource.java of the RESTful operating system service of Open Network Operating System exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to arbitrarily modify the settings...

The vulnerability of the createFlow() and createFlows() functions (FlowWebResource.java) of the RESTful operating system-based service of Open Network Operating System allows a hacker to arbitrarily modify the settings of the switch.

The vulnerability of the createFlow and createFlows functions FlowWebResource.java of the RESTful operating system service of Open Network Operating System is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to arbitrarily modify the settings of the switch...

CVE-2019-1010250

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The...

Integer overflow

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The attack...

Input validation

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The...

CVE-2019-1010249

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The attack...

CVE-2019-1010250

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The...