CVE-2015-7516

Опубликовано: 24 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconnect) by sending two Ethernet frames with ether_type Jumbo Frame (0x8870).

Ссылки

http://www.openwall.com/lists/oss-security/2015/11/26/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/77752
Third Party Advisory
VDB Entry
https://gerrit.onosproject.org/#/c/6137/
Patch
Third Party Advisory
https://jira.onosproject.org/browse/ONOS-3349
Issue Tracking
Patch
Vendor Advisory
https://wiki.onosproject.org/display/ONOS/Security+advisories
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/11/26/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/77752
Third Party Advisory
VDB Entry
https://gerrit.onosproject.org/#/c/6137/
Patch
Third Party Advisory
https://jira.onosproject.org/browse/ONOS-3349
Issue Tracking
Patch
Vendor Advisory
https://wiki.onosproject.org/display/ONOS/Security+advisories
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:onosproject:onos:*:*:*:*:*:*:*:*

Версия до 1.4.0 (включая)

EPSS

Процентиль: 80%

0.01343

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-jrwf-hwq3-2j8j