CVE-2019-1010249: Integer Overflow
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1010249?
CVE-2019-1010249 has a medium severity rating due to the potential for unintended changes to flow rules.
How do I fix CVE-2019-1010249?
To address CVE-2019-1010249, upgrade to a version of ONOS later than 2.0.0 that includes the necessary patches.
What software is affected by CVE-2019-1010249?
CVE-2019-1010249 affects ONOS 2.0.0 and earlier versions of the Linux Foundation Open Network Operating System.
What are the consequences of exploiting CVE-2019-1010249?
Exploiting CVE-2019-1010249 can allow an attacker to unintentionally install incorrect flow rules in network switches.
Which functions are responsible for the vulnerability identified in CVE-2019-1010249?
The vulnerability in CVE-2019-1010249 is tied to the createFlow() and createFlows() functions in FlowWebResource.java.