CyberSecBulletin

Opennetworking vulnerabilities

We track 52 vulnerabilities in Opennetworking products across 4 products. 52 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.

52vulnerabilities
5critical
47high
0exploited
7.7average CVSS score

Latest Opennetworking vulnerabilities

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31168Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::EchoCommon::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: NULL Pointer Dereference

    CVE-2024-31167Open Networking Foundation (ONF)

    Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::QueuePropertyList::unpack13. This issue affects libfluid: 0.1.

  • 7.5 High severity

    libfluid: Out-of-bounds Read

    CVE-2024-31166Open Networking Foundation (ONF)

    Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::HelloElemVersionBitmap::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: NULL Pointer Dereference

    CVE-2024-31165Open Networking Foundation (ONF)

    Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1

  • 7.5 High severity

    libfluid: NULL Pointer Dereference

    CVE-2024-31164Open Networking Foundation (ONF)

    Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::ActionList::unpack13. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: NULL Pointer Dereference

    CVE-2024-23916Open Networking Foundation (ONF)

    Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::ActionSet::unpack. This issue affects libfluid: 0.1.0.

  • 7.5 High severity

    libfluid: NULL Pointer Dereference

    CVE-2024-23915Open Networking Foundation (ONF)

    Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::of13::InstructionSet::unpack. This issue affects libfluid: 0.

  • 7.5 High severity

    Onos: Always-Incorrect Control Flow Implementation

    CVE-2022-29607Opennetworking

    An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.

  • 9.8 Critical severity

    An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT…

    CVE-2022-29606Opennetworking

    An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state, which is misleading to a network operator. Improper handling of such port numbers causes inconsistency between intent and flow rules in the network.

  • 7.5 High severity

    Onos: Always-Incorrect Control Flow Implementation

    CVE-2022-29605Opennetworking

    An issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of an intent into an OpenFlow 1.0 switch that does not support IPv6. Improper handling of the difference in capabilities of the intent and switch is misleading to a ne

  • 9.8 Critical severity

    Onos: Improper Handling of Case Sensitivity

    CVE-2022-29604OpennetworkingEPSS 1.01%

    An issue was discovered in ONOS 2.5.1. An intent with an uppercase letter in a device ID shows the CORRUPT state, which is misleading to a network operator. Improper handling of case sensitivity causes inconsistency between intent and flow rules in the network

  • 7.5 High severity

    Onos: Uncontrolled Resource Consumption

    CVE-2022-24035Opennetworking

    An issue was discovered in ONOS 2.5.1. The purge-requested intent remains on the list, but it does not respond to changes in topology (e.g., link failure). In combination with other applications, it could lead to a failure of network management.