CVE-2019-16299: High severity linux foundation open network operating system vulnerability

Published Feb 20, 2020

Updated

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following event types: HOSTADDED, HOSTREMOVED, HOSTUPDATED. In combination with other applications, this could lead to the absence of intended code execution.

Affected Software

1 affected component

linuxfoundation Open Network Operating System=1.14.0

Event History

Feb 20, 2020

CVE Published

via MITRE·09:40 PM

Data Sourced

via MITRE·09:40 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-16299?

CVE-2019-16299 has been classified as a medium severity vulnerability.

How do I fix CVE-2019-16299?

To fix CVE-2019-16299, update to the latest version of Open Network Operating System that addresses this issue.

What components are affected by CVE-2019-16299?

CVE-2019-16299 affects the mobility application component in Open Network Operating System version 1.14.

What are the implications of CVE-2019-16299?

CVE-2019-16299 may lead to ineffective handling of host events, potentially impacting network management.

Is CVE-2019-16299 exploitable in a production environment?

Yes, CVE-2019-16299 could be exploited in a production environment when combined with other applications.