252 matches found
CVE-2017-1000411: Improper Resource Shutdown or Release
OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and...
OpenDaylight OpenFlow Plugin and Controller Denial of Service Vulnerability
Opendaylight, a project of the Linux Foundation, is a community-driven, open-source, software-defined networking framework that includes an ensemble of modules to perform networking tasks that need to be done quickly.OpenDaylight OpenFlow is one of the new network switching models; Controller is...
CVE-2017-1000406
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...
OpenDaylight Karaf Information Disclosure Vulnerability
OpenDaylight, a project of the Linux Foundation in the United States, is a set of community-driven open source software-defined networking frameworks that contain an ensemble of modules capable of performing networking tasks that need to be done quickly.Karaf is an OSGi-based runtime environment...
CVE-2017-1000406
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...
CVE-2017-1000406
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...
Default credentials
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...
CVE-2017-1000406
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...
CVE-2017-1000406
CVE-2017-1000406 affects OpenDaylight Karaf 0.6.1-Carbon. The underlying issue is that the Karaf cache is not cleared after a password change, allowing the old password to be accepted until the cache is cleared (e.g., via restart). Impacted component: Karaf runtime within OpenDaylight; affected b...
CVE-2017-1000406: Undefined Security Weakness
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...
DELTA - SDN Security Evaluation Framework
DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...
OpenDaylight odl-mdsal-xsql component resource management error vulnerability
OpenDaylight, a project of the Linux Foundation, is a community-driven, open-source software-defined networking framework that includes a collection of modules to perform networking tasks that need to be done quickly.OpenDaylight odl-mdsal-xsql is one of the XML-based query components used to...
OpenDaylight Denial of Service Vulnerability
OpenDaylight, a project of the Linux Foundation in the United States, is a community-driven, open-source, software-defined networking framework that contains an ensemble of modules capable of performing networking tasks that need to be done quickly. A security vulnerability exists in OpenDaylight...
OpenDaylight odl-restconf Denial of Service Vulnerability
OpenDaylight, a project of the Linux Foundation in the United States, is a community-driven, open-source, software-defined networking framework that contains an ensemble of modules capable of performing networking tasks that need to be done quickly. A security vulnerability exists in odl-restconf...
OpenDaylight 'odl-l2switch-switch' Denial of Service Vulnerability
OpenDaylight, a project of the Linux Foundation in the United States, is a community-driven, open-source, software-defined networking framework that contains an ensemble of modules capable of performing networking tasks that need to be done quickly. A security vulnerability exists in the...
CVE-2015-1778
The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...
Design/Logic Flaw
The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...
Code injection
OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files...