CVE-2019-1010250: Linuxfoundation Open Network Operating System

Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days.

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.

Affected products

• Linuxfoundation Open Network Operating System: up to and including 2.0.0

Published 2019-07-18. Last modified 2026-06-17.