An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.
References
| Link | Resource |
|---|---|
| https://wiki.onosproject.org/display/ONOS/Intent+Framework | Product |
| https://wiki.onosproject.org/display/ONOS/Intent+Framework | Product |
| https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf | Exploit Technical Description Third Party Advisory |
| https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf | Exploit Technical Description Third Party Advisory |
Configurations
History
05 Feb 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf - Exploit, Technical Description, Third Party Advisory | |
| References | () https://wiki.onosproject.org/display/ONOS/Intent+Framework - Product |
03 May 2023, 19:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://wiki.onosproject.org/display/ONOS/Intent+Framework - Product | |
| References | (MISC) https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf - Exploit, Technical Description, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Opennetworking
Opennetworking onos |
|
| CWE | CWE-670 | |
| CPE | cpe:2.3:a:opennetworking:onos:2.5.1:*:*:*:*:*:*:* |
20 Apr 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-20 13:15
Updated : 2025-02-05 15:15
NVD link : CVE-2022-29607
Mitre link : CVE-2022-29607
JSON object : View
Products Affected
opennetworking
- onos
CWE
CWE-670
Always-Incorrect Control Flow Implementation