CVE-2019-1010245: Input Validation
The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The component is: apps/yang/src/main/java/org/onosproject/yang/impl/YangLiveCompilerManager.java. The attack vector is: network connectivity. The fixed version is: 1.15.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1010245?
CVE-2019-1010245 is considered critical due to the potential for arbitrary command execution by a remote attacker.
How do I fix CVE-2019-1010245?
To fix CVE-2019-1010245, upgrade the ONOS SDN Controller to version 1.16 or later.
What versions of ONOS are affected by CVE-2019-1010245?
CVE-2019-1010245 affects ONOS SDN Controller versions 1.15 and earlier.
What type of input validation issue is present in CVE-2019-1010245?
CVE-2019-1010245 is caused by improper input validation in the YangLiveCompilerManager component.
Can an attacker exploit CVE-2019-1010245 remotely?
Yes, CVE-2019-1010245 allows a remote attacker to execute arbitrary commands on the ONOS controller.