CVE-2019-16297

ONOS 1.14’s P4 tutorial application (org.onosproject.p4tutorial) has a host event listener that fails to handle HOST_MOVED, HOST_REMOVED, and HOST_UPDATED. This gap can, in combination with other applications, permit unintended code execution. The issue is documented across multiple sources (ONOS...