CVE-2015-7516

ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconnect) by sending two Ethernet frames with ether_type Jumbo Frame (0x8870).

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2017-08-24

Last modified

2024-08-06

Weaknesses

CWE-476

Affected products

• Onos (Onosproject)

References

• http://www.openwall.com/lists/oss-security/2015/11/26/1
• http://www.securityfocus.com/bid/77752
• https://gerrit.onosproject.org/#/c/6137/
• https://jira.onosproject.org/browse/ONOS-3349
• https://wiki.onosproject.org/display/ONOS/Security+advisories