CVE-2019-16302

7.5 highEPSS 1.7%

High (7.5) in linuxfoundation open network operating system. EPSS 1.7% chance of exploitation in the next 30 days.

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the following event types: HOST_MOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-755
Published: 2020-02-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linuxfoundation:open_network_operating_system

References

https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf

Check your stack JSON