CVE-2022-29606

2023-04-2000:00:00

mitre

www.cve.org

cve-2022-29606

onos

intent

port numbers

network inconsistency

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

60.6%

JSON

An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state, which is misleading to a network operator. Improper handling of such port numbers causes inconsistency between intent and flow rules in the network.

References

wiki.onosproject.org/display/ONOS/Intent+Framework

www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf