CVE-2021-38363 Information

Description

An issue was discovered in ONOS 2.5.1. In IntentManager the install-requested intent (which causes an exception) remains in pendingMap (in memory) forever. Deletion is possible neither by a user nor by the intermittent Intent Cleanup process.

Reference

https://opennetworking.org/onos/ https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf