CVE-2022-29606

An issue was discovered in ONOS 2.5.1

Critical · published April 20, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

🔥 A port number way out of bounds is creating chaos in ONOS 2.5.1! When it shows a CORRUPT state, network operators are left scratching their heads. ⚡ Think of it like a traffic light malfunctioning — a green light at an intersection with no cars can mislead drivers. In this case, the misleading CORRUPT state could send network operators down the wrong path, creating confusion in traffic flow. This vulnerability could lead to significant network disruptions, where flow rules don’t align with the intended operations. Imagine a busy highway experiencing random traffic jams because incorrect signals are being sent out — that's the risk operators face with this flaw!

Put simply

Think of it like a traffic light malfunctioning — a green light at an intersection with no cars can mislead drivers. In this case, the misleading CORRUPT state could send network operators down the wrong path, creating confusion in traffic flow. In ONOS 2.5.1, certain large port numbers are not handled correctly, causing mismatches between intents and flow rules. This inconsistency can lead to misconfigurations in network control.

What to do

This vulnerability could lead to significant network disruptions, where flow rules don’t align with the intended operations. Imagine a busy highway experiencing random traffic jams because incorrect signals are being sent out — that's the risk operators face with this flaw! Immediate action is required: upgrade to ONOS version 2.5.2 or later to resolve this issue. Additionally, review your network configurations for any inconsistencies that may have arisen from this vulnerability. You've got this! With these steps, you'll secure your network and restore order in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.0th percentile
Published
2023-04-20T00:00Z
EPSS history
Timeline
  • 20 APR 00:00Z
    An issue was discovered in ONOS 2.5.1
    cvelistv5