232 matches found
CVE-2017-1000358
Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDaylight odl-restconf feature contains this flaw. Version: OpenDaylight 4.0 is affected by this flaw...
CVE-2017-1000358
CVE-2017-1000358 affects OpenDaylight, specifically the odl-restconf feature. The vulnerability occurs when configuring flows for a single switch, where the controller throws an exception and blocks adding subsequent flows. Affected version cited: OpenDaylight 4.0. The public documents do not pro...
CVE-2017-1000361
OpenDaylight has a Denial of Service flaw (CVE-2017-1000361) affecting OpenDaylight 3.3 and 4.0. The issue centers on DOMRpcImplementationNotAvailableException triggered when sending Port-Status packets, causing exceptions and higher CPU consumption. Public references (GitHub advisory GHSA-8P5X-W...
CVE-2017-1000357
The CVE affects OpenDaylight odl-l2switch-switch (OpenFlow component). A Denial of Service occurs when the switch rejects to receive packets from the controller. Impact is described as availability impact (Partial) with CVSS v3.0 HIGH and CVSS v2 MEDIUM, from the provided metrics. Affected OpenDa...
CVE-2017-1000360
CVE-2017-1000360 affects the OpenDaylight project, specifically the odl-mdsal-xsql component. The flaw manifests as StreamCorruptedException and NullPointerException, with the controller emitting exceptions to the console. Reported affected versions in the provided records are OpenDaylight 3.3 an...
CVE-2017-1000360
StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...
CVE-2017-1000359
CVE-2017-1000359 affects the OpenDaylight module odl-mdsal-xsql in OpenDaylight versions 3.3 and 4.0. The root cause is a resource management error that can cause a Java OutOfMemoryError and significant resource consumption, potentially leading to service disruption (DoS). No exploitation details...
CVE-2017-1000358
Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDaylight odl-restconf feature contains this flaw. Version: OpenDaylight 4.0 is affected by this flaw...
CVE-2017-1000361
DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...
CVE-2017-1000359
Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...
CVE-2017-1000357
Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 Lithium-SR3, 3.4 Lithium-SR4, 4.0...
CVE-2015-1612
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."...
Buffer overflow
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."...
CVE-2015-1611
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."...
CVE-2015-1611
The OpenFlow plugin for OpenDaylight (before Helium SR3) is affected by LLDP spoofing via fake LLDP injections, enabling remote attackers to spoof the SDN topology and disrupt data flow. Affected component: openflowplugin in OpenDaylight; root cause: reuse/fake LLDP packets. Impact: topology spoo...
CVE-2015-1612
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."...
CVE-2015-1611
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."...
CVE-2015-1612
The CVE-2015-1612 issue affects the OpenFlow plugin for OpenDaylight (before Helium SR3). It enables LLDP-related spoofing of the SDN topology that can affect data flow. Affected component: openflowplugin in OpenDaylight; root cause: reuse of LLDP packets leading to topology spoofing (LLDP Relay)...