ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconnect) by sending two Ethernet frames with ether_type Jumbo Frame (0x8870).
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2015/11/26/1 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/77752 | Third Party Advisory VDB Entry |
| https://gerrit.onosproject.org/#/c/6137/ | Patch Third Party Advisory |
| https://jira.onosproject.org/browse/ONOS-3349 | Issue Tracking Patch Vendor Advisory |
| https://wiki.onosproject.org/display/ONOS/Security+advisories | Patch Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2015/11/26/1 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/77752 | Third Party Advisory VDB Entry |
| https://gerrit.onosproject.org/#/c/6137/ | Patch Third Party Advisory |
| https://jira.onosproject.org/browse/ONOS-3349 | Issue Tracking Patch Vendor Advisory |
| https://wiki.onosproject.org/display/ONOS/Security+advisories | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 02:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2015/11/26/1 - Mailing List, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/77752 - Third Party Advisory, VDB Entry | |
| References | () https://gerrit.onosproject.org/#/c/6137/ - Patch, Third Party Advisory | |
| References | () https://jira.onosproject.org/browse/ONOS-3349 - Issue Tracking, Patch, Vendor Advisory | |
| References | () https://wiki.onosproject.org/display/ONOS/Security+advisories - Patch, Vendor Advisory |
Information
Published : 2017-08-24 20:29
Updated : 2025-04-20 01:37
NVD link : CVE-2015-7516
Mitre link : CVE-2015-7516
CVE.ORG link : CVE-2015-7516
JSON object : View
Products Affected
onosproject
- onos
CWE
CWE-476
NULL Pointer Dereference