Description
Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows attackers to bypass network access control via data plane packet injection.
Remediation
References
https://gerrit.onosproject.org/#/c/18867/
https://wiki.onosproject.org/display/ONOS/Security+advisories
Related Vulnerabilities
CVE-2018-1320 Vulnerability in maven package org.apache.thrift:libthrift
CVE-2015-6748 Vulnerability in maven package org.jsoup:jsoup
CVE-2023-26111 Vulnerability in npm package @nubosoftware/node-static
CVE-2023-40817 Vulnerability in maven package org.opencrx:opencrx-core-models
CVE-2022-3171 Vulnerability in maven package com.google.protobuf:protobuf-kotlin-lite