Maven/org.onosproject:onos-base CVE-2017-13763: high 7.5, EPSS 1.06%
ONOS vulnerable to denial of service due to unrestricted NettyMessagingManager payload
Action: Upgrade org.onosproject:onos-base to 1.11.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.8.0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: GHSA-c6p7-vhw7-rc9w
- https://nvd.nist.gov/vuln/detail/CVE-2017-13763
- https://github.com/opennetworkinglab/onos/commit/f7c7f6f229978fe4e78045069a4485504cc108c4
- https://gerrit.onosproject.org/#/c/13831
- https://gerrit.onosproject.org/#/c/14318
- https://github.com/opennetworkinglab/onos
- https://jira.onosproject.org/browse/ONOS-6401
CVE-2017-13763 · published · modified · JSON