High · 7.5 CVE-2017-13763 EUVD-2022-3518GHSA-c6p7-vhw7-rc9w

ONOS vulnerable to denial of service due to unrestricted NettyMessagingManager payload

Published Aug 30, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Description

ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.onosproject:onos-base	>= 1.8.0, < 1.11.0	1.11.0	GHSA-c6p7-vhw7-rc9w