Linuxfoundation Software For Open Networking In The Cloud vulnerabilities
2 vulnerabilities
Known vulnerabilities in Linuxfoundation Software For Open Networking In The Cloud, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-0324linux foundationsoftware for open networking in the cloud (sonic)+1
EPSS score1.26%
There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.
Discovered by Eugene Lim of GovTech Singapore.CVE-2024-21418linuxfoundationsoftware_for_open_networking_in_the_cloud+1EPSS score0.73%
Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability