Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

Description

It was found that the packet deserializers in ONOS would throw exceptions when handling jumbo frames. The exceptions ONOS core did not properly protect itself from exceptions thrown in application packet processors. Exceptions thrown by applications were not caught and handled, which would result in the relevant switch being disconnected because an exception occurred in an I/O thread. A An application could exhibit behavior (either intentionally or unintentionally) which would allow a remote unauthenticated attacker could use this flaw to perform a denial-of-service (DoS) attack by causing ONOS to disconnect switches.

...