opennetworking vulnerabilities

Recent CVEs affecting opennetworking products. 48 tracked.

opennetworking has 48 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-12-18. Highest priority: CVE-2025-29312 (score 52/100).

• CVE-2025-65563 HIGH 7.5 UPGRADE A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least
• CVE-2025-65564 HIGH 7.5 DOWNGRADE A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.
• CVE-2025-65565 HIGH 7.5 DOWNGRADE A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcp
• CVE-2025-65567 HIGH 7.5 DOWNGRADE A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcp
• CVE-2025-65568 HIGH 7.5 DOWNGRADE A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcp
• CVE-2025-29312 CRITICAL 9.1 DOWNGRADE An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy
• CVE-2025-29311 HIGH 7.5 DOWNGRADE Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a brut
• CVE-2025-29310 CRITICAL 9.8 DOWNGRADE An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted
• CVE-2024-53423 MEDIUM 5.6 DOWNGRADE An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supply
• CVE-2024-48809 HIGH 7.5 DOWNGRADE DOWNGRADE An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker t
• CVE-2024-31198 MEDIUM 5.3 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31197 MEDIUM 5.3 DOWNGRADE Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31196 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-31195 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31194 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31193 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31192 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31191 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31190 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31189 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31188 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31187 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31186 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31185 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-31184 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31183 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31182 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-31181 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31180 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31179 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31178 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31177 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules)
• CVE-2024-31176 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31175 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-31174 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31173 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31172 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31171 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31170 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31169 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31168 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31167 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-31166 MEDIUM 6.5 DOWNGRADE Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module)
• CVE-2024-31165 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-31164 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-23916 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2024-23915 MEDIUM 5.3 DOWNGRADE Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid
• CVE-2023-41591 CRITICAL 9.8 DOWNGRADE An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potential

FAQ

How do I fix opennetworking vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is opennetworking being exploited right now?

None of the tracked opennetworking CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which opennetworking CVE should I patch first?

CVE-2025-29312 currently ranks highest (52/100): An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy .

Products

• libfluid msg
• onos
• onos-a1t
• sdran-in-a-box
• upf

RSS feed for opennetworking · ← Back to latest CVEs