Onosproject vulnerabilities
We track 3 vulnerabilities in Onosproject products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2024.
3vulnerabilities
0critical
3high
0exploited
7.5average CVSS score
Latest Onosproject vulnerabilities
- 7.5 High severity
sdran-in-a-box: Allocation of Resources Without Limits or Throttling
An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function.
- 7.5 High severity
onos: Improper Validation of Array Index
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8 | uint64(b[0])" in reader.go.
- 7.5 High severity
rimedo-ts: Out-of-bounds Read
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString[0:3], plmnIdString[3:]" in reader.go.