CVE-2019-16300: High severity linux foundation open network operating system vulnerability

Published Feb 20, 2020

Updated

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types: HOSTREMOVED. In combination with other applications, this could lead to the absence of intended code execution.

Affected Software

1 affected component

linuxfoundation Open Network Operating System=1.14.0

Event History

Feb 20, 2020

CVE Published

via MITRE·09:42 PM

Data Sourced

via MITRE·09:42 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-16300?

The severity of CVE-2019-16300 is classified as medium due to potential unintended code execution.

How do I fix CVE-2019-16300?

To fix CVE-2019-16300, you should upgrade to a later version of Open Network Operating System that addresses this vulnerability.

Which versions of Open Network Operating System are affected by CVE-2019-16300?

CVE-2019-16300 affects Open Network Operating System version 1.14.0.

What type of vulnerability is CVE-2019-16300?

CVE-2019-16300 is an access control vulnerability related to event handling.

Can CVE-2019-16300 lead to serious security issues?

Yes, CVE-2019-16300 can potentially lead to unauthorized code execution if exploited in combination with other vulnerabilities.