CVE-2018-1000615

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-07-09 · updated 2026-06-17

Description

ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.. This attack appear to be exploitable via the attacker should be able to control or forge a switch in the network..

Affected products

onosproject Onos: through 1.13.1

References

http://gms.cl0udz.com/OVSDB_DOS.pdf
https://gerrit.onosproject.org/#/c/18926/
http://gms.cl0udz.com/OVSDB_DOS.pdf
https://gerrit.onosproject.org/#/c/18926/

Get alerted when CVE-2018-1000615 or the next vulnerability affects your stack