PT-2021-10209

Name of the Vulnerable Software and Affected Versions: Floodlight versions 1.2 and earlier Description: The issue is related to an integer overflow in the checkFlow function within StaticFlowEntryPusherResource.java, which can be triggered via the priority or port number. Recommendations: For...

CVE-2020-18684: Integer Overflow or Wraparound

Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number...

CVE-2020-18685: Improper Input Validation

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs...

CVE-2020-18683: Improper Input Validation

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling...

Floodlight input validation vulnerability

Floodlight is an open source OpenFlow controller. Floodlight is vulnerable to an integer overflow vulnerability, which stems from the software having an integer overflow in the checkFlow of StaticFlowEntryPusherResource.java via priority or port number. No detailed vulnerability details are...

Floodlight input validation vulnerability

Floodlight is a leading open source OpenFlow controller. An input validation error vulnerability exists in Floodlight version 1.2, which stems from the software having poor input validation in the checkFlow in StaticFlowEntryPusherResource.java, as there is no checking of prerequisites related to...

CVE-2014-2304

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURESREPLY messages cause...

Design/Logic Flaw

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURESREPLY messages cause...

CVE-2013-7333

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices...

Design/Logic Flaw

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices...

CVE-2014-2304

The connected records identify CVE-2014-2304 as affecting Open Floodlight SDN controller version 0.90. The root cause is a flaw in OpenFlow protocol processing where malformed and mistimed FEATURES_REPLY messages cause the controller to fail to delete switch and port data from internal tracking s...

CVE-2014-2304

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURESREPLY messages cause...

CVE-2013-7333

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices...

CVE-2013-7333

Open Floodlight SDN controller version 0.90 is affected by CVE-2013-7333. The vulnerability allows an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the controller, leading to degradation and eventual denial of network access for devices co...

CVE-2014-2304: Improper Input Validation

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURESREPLY messages cause...

PT-2019-7085

Name of the Vulnerable Software and Affected Versions Open Floodlight SDN controller software version 0.90 Description A flaw in OpenFlow protocol processing could result in a denial of service attack and crashing of the controller service. This is caused by specific malformed and mistimed FEATUR...

PT-2019-7012

Name of the Vulnerable Software and Affected Versions Open Floodlight SDN controller software version 0.90 Description A vulnerability in the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches...

CVE-2013-7333: Improper Input Validation

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices...

Input validation

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...

CVE-2018-1000617

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...