https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65568.htmlhttps://patchthecve.com/cve/CVE-2025-65568.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request that includes a CreateFAR with an empty or truncated IPv4 address field is not properly validated. During parsinhttps://patchthecve.com/cve/CVE-2025-65567.htmlhttps://patchthecve.com/cve/CVE-2025-65567.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a specially crafted PFCP Session Establishment Request with a CreatePDR that contains a malformed Flow-Description is not robustly validated. The Flohttps://patchthecve.com/cve/CVE-2025-65565.htmlhttps://patchthecve.com/cve/CVE-2025-65565.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association is established, a PFCP Session Establishment Request that is missing the mandatory F-SEID (CPF-SEID) Information Element is not properly validated. Thhttps://patchthecve.com/cve/CVE-2025-65564.htmlhttps://patchthecve.com/cve/CVE-2025-65564.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory Recovery Time Stamp Information Element, the association setup handler dereferences a nil pointer https://patchthecve.com/cve/CVE-2025-65563.htmlhttps://patchthecve.com/cve/CVE-2025-65563.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory NodeID Information Element, the association setup handler dereferenchttps://patchthecve.com/cve/CVE-2024-53423.htmlhttps://patchthecve.com/cve/CVE-2024-53423.htmlWed, 17 Jun 2026 08:08:52 +0000MEDIUM 5.6: An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets.https://patchthecve.com/cve/CVE-2023-41591.htmlhttps://patchthecve.com/cve/CVE-2023-41591.htmlWed, 17 Jun 2026 06:22:26 +0000CRITICAL 9.8: An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.https://patchthecve.com/cve/CVE-2025-29312.htmlhttps://patchthecve.com/cve/CVE-2025-29312.htmlWed, 17 Jun 2026 09:05:16 +0000CRITICAL 9.1: An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct.https://patchthecve.com/cve/CVE-2025-29311.htmlhttps://patchthecve.com/cve/CVE-2025-29311.htmlWed, 17 Jun 2026 09:05:15 +0000HIGH 7.5: Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets.https://patchthecve.com/cve/CVE-2025-29310.htmlhttps://patchthecve.com/cve/CVE-2025-29310.htmlWed, 17 Jun 2026 09:05:15 +0000CRITICAL 9.8: An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet. This vulnerability allows attackers to execute arbitrary commands or access network information.https://patchthecve.com/cve/CVE-2024-48809.htmlhttps://patchthecve.com/cve/CVE-2024-48809.htmlWed, 17 Jun 2026 07:58:49 +0000HIGH 7.5: An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function.https://patchthecve.com/cve/CVE-2024-31198.htmlhttps://patchthecve.com/cve/CVE-2024-31198.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 5.3: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31197.htmlhttps://patchthecve.com/cve/CVE-2024-31197.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 5.3: Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31196.htmlhttps://patchthecve.com/cve/CVE-2024-31196.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::ActionList::unpack10. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31195.htmlhttps://patchthecve.com/cve/CVE-2024-31195.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTable::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31194.htmlhttps://patchthecve.com/cve/CVE-2024-31194.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortStats::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31193.htmlhttps://patchthecve.com/cve/CVE-2024-31193.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroup::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31192.htmlhttps://patchthecve.com/cve/CVE-2024-31192.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroupDesc::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31191.htmlhttps://patchthecve.com/cve/CVE-2024-31191.htmlWed, 17 Jun 2026 07:27:57 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeter::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31190.htmlhttps://patchthecve.com/cve/CVE-2024-31190.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeterConfig::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31189.htmlhttps://patchthecve.com/cve/CVE-2024-31189.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartRequestTableFeatures::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31188.htmlhttps://patchthecve.com/cve/CVE-2024-31188.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTableFeatures::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31187.htmlhttps://patchthecve.com/cve/CVE-2024-31187.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortDescription::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31186.htmlhttps://patchthecve.com/cve/CVE-2024-31186.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::QueueGetConfigReply::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31185.htmlhttps://patchthecve.com/cve/CVE-2024-31185.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MeterBandList::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31184.htmlhttps://patchthecve.com/cve/CVE-2024-31184.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MeterStats::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31183.htmlhttps://patchthecve.com/cve/CVE-2024-31183.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::Hello::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31182.htmlhttps://patchthecve.com/cve/CVE-2024-31182.htmlWed, 17 Jun 2026 07:27:56 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::QueuePropertyList::unpack10. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31181.htmlhttps://patchthecve.com/cve/CVE-2024-31181.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupStats::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31180.htmlhttps://patchthecve.com/cve/CVE-2024-31180.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupDesc::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31179.htmlhttps://patchthecve.com/cve/CVE-2024-31179.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropInstruction::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31178.htmlhttps://patchthecve.com/cve/CVE-2024-31178.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropNextTables::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31177.htmlhttps://patchthecve.com/cve/CVE-2024-31177.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules). This vulnerability is associated with program routines fluid_msg::of13::TableFeaturePropActions::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31176.htmlhttps://patchthecve.com/cve/CVE-2024-31176.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropOXM::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31175.htmlhttps://patchthecve.com/cve/CVE-2024-31175.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TablePropertiesList::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31174.htmlhttps://patchthecve.com/cve/CVE-2024-31174.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::FeaturesReply::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31173.htmlhttps://patchthecve.com/cve/CVE-2024-31173.htmlWed, 17 Jun 2026 07:27:55 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyFlow::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31172.htmlhttps://patchthecve.com/cve/CVE-2024-31172.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyTable::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31171.htmlhttps://patchthecve.com/cve/CVE-2024-31171.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyPort::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31170.htmlhttps://patchthecve.com/cve/CVE-2024-31170.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyQueue::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31169.htmlhttps://patchthecve.com/cve/CVE-2024-31169.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::QueueGetConfigReply::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31168.htmlhttps://patchthecve.com/cve/CVE-2024-31168.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::EchoCommon::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31167.htmlhttps://patchthecve.com/cve/CVE-2024-31167.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::QueuePropertyList::unpack13. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31166.htmlhttps://patchthecve.com/cve/CVE-2024-31166.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 6.5: Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::HelloElemVersionBitmap::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31165.htmlhttps://patchthecve.com/cve/CVE-2024-31165.htmlWed, 17 Jun 2026 07:27:54 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-31164.htmlhttps://patchthecve.com/cve/CVE-2024-31164.htmlWed, 17 Jun 2026 07:27:53 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::ActionList::unpack13. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-23916.htmlhttps://patchthecve.com/cve/CVE-2024-23916.htmlWed, 17 Jun 2026 07:13:53 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::ActionSet::unpack. This issue affects libfluid: 0.1.0.https://patchthecve.com/cve/CVE-2024-23915.htmlhttps://patchthecve.com/cve/CVE-2024-23915.htmlWed, 17 Jun 2026 07:13:53 +0000MEDIUM 5.3: Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routines fluid_msg::of13::InstructionSet::unpack. This issue affects libfluid: 0.1.0.