Unrated

Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows atta...

CVE-2018-12691 First seen on SecPulse Jul 6, 2018

Original description The description as published by the source.

Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows attackers to bypass network access control via data plane packet injection.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory wiki.onosproject.org
patch gerrit.onosproject.org

Key facts

Severity: Unrated
Published: Jul 6, 2018
First seen on SecPulse: Jul 6, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50