CVE-2023-52725

The Open Networking Foundation SD-RAN ONOS onos-kpimon version 0.4.7 is vulnerable to a Denial of Service (DoS) condition. The root cause is the blocking of the errCh channel within the Start function of the monitoring package, which leads to resource exhaustion because the associated indication ...

CVE-2023-52724

The Open Networking Foundation SD-RAN onos-kpimon version 0.4.7 is vulnerable to an out-of-bounds array access within the processIndicationFormat1 function. This issue arises from the improper handling of array indices, which could allow an attacker to cause a crash or potentially achieve arbitra...