CVE-2018-1000615 - ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.

Back Back to CVE browser

HIGH

ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.

Published Jul 9, 2018

7.5

HIGH

CVSS 3.0

EPSS 1.16%

Description

ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.. This attack appear to be exploitable via the attacker should be able to control or forge a switch in the network..

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://gms.cl0udz.com/OVSDB_DOS.pdf
x_refsource_MISCExploitThird Party Advisory
https://gerrit.onosproject.org/#/c/18926/
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory

Link	Providers	Tags
http://gms.cl0udz.com/OVSDB_DOS.pdf		x_refsource_MISCExploitThird Party Advisory
https://gerrit.onosproject.org/#/c/18926/		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 9, 2018

Updated Sep 16, 2024

Reserved Jul 9, 2018

Link CVE-2018-1000615

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-1000615

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-1000615