Open Network Foundation ONOS Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Open Network Foundation (ONOS) version 2.7.0. This issue allows attackers to disrupt service by sending crafted packets that flood the system. The malicious IPv4 packets bypass the P4 program filters in 'basic.p4' or 'fabric.p4', but fail during deserialization in the ONOS core. This deserialization error prevents applications from processing other packets necessary for registering hosts and links.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing disruptions in normal network operations by preventing the registration of hosts and links.