CVE-2015-7516: Onosproject Onos

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconnect) by sending two Ethernet frames with ether_type Jumbo Frame (0x8870).

Affected products

• Onosproject Onos: up to and including 1.4.0

Published 2017-08-24. Last modified 2026-06-17.