2.7.0
10 years ago
3 years ago
Known vulnerabilities in the org.onosproject:onos-core-net package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
org.onosproject:onos-core-net is an ONOS network control core subsystem. Affected versions of this package are vulnerable to User Impersonation through the manipulation of IP/MAC address mappings. An attacker can send crafted messages containing spoofed IP/MAC addresses, replacing those of known hosts, thereby causing a man-in-the-middle attack on communications between fake and real hosts. How to fix User Impersonation? There is no fixed version for | [0,) |