Design/Logic Flaw

2019-10-2318:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.3%

JSON

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURES_REPLY messages cause the controller service to not delete switch and port data from its internal tracking structures.

CPENameOperatorVersion
open_sdn_controllereq0.90

CPE	Name	Operator	Version
	open_sdn_controller	eq	0.90

References

dovernetworks.com/wp-content/uploads/2014/03/OpenFloodlight-03052014.pdf