Denial Of Service (DoS)

OpenDaylight Service Function Chaining SFC is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of name resolution or references and allows an attacker to exploit incorrect resolutions to cause a Denial of Service DoS...

CVE-2025-29313

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

CVE-2025-29314

Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allow attackers to access sensitive information via a man-in-the-middle attack...

GHSA-V3VP-FG2V-G7Q4 OpenDaylight SFC Denial of Service (DoS)

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

GHSA-XP75-W7VQ-5X6J OpenDaylight SFC Insecure Shiro Cookie Configuration

Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allow attackers to access sensitive information via a man-in-the-middle attack...

CVE-2025-29313

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

CVE-2025-29314: Missing Encryption of Sensitive Data

Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allow attackers to access sensitive information via a man-in-the-middle attack...

CVE-2025-29313: Improper Resource Shutdown or Release

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

CVE-2025-29315

The OpenDaylight Service Function Chaining (SFC) subproject, specifically the SFC Sodium-SR4 and below versions, is vulnerable to Improper Access Control . The root cause is a flaw in the Shiro-based RBAC (Role-based Access Control) mechanism , which allows attackers to execute privileged operati...

CVE-2025-29313

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

CVE-2025-29315

An issue in the Shiro-based RBAC Role-based Access Control mechanism of OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to execute privileged operations via a crafted request...

CVE-2025-29314

The OpenDaylight Service Function Chaining (SFC) subproject is vulnerable to a Missing Encryption of Sensitive Data issue in versions SFC Sodium-SR4 and below. The root cause is the use of insecure Shiro cookie configurations, specifically where _secureCookies=False and _httpOnly=False are set. T...

CVE-2025-29313

The OpenDaylight Service Function Chaining (SFC) subproject is vulnerable to a Denial of Service (DoS) due to the improper handling of name resolution or references. Specifically, a lack of consistency in maintaining independent representations of shared state can lead to two different OpenFlowNo...

CVE-2025-29315: Improper Access Control

An issue in the Shiro-based RBAC Role-based Access Control mechanism of OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to execute privileged operations via a crafted request...

PT-2025-12711

Name of the Vulnerable Software and Affected Versions OpenDaylight Service Function Chaining SFC Subproject versions Sodium-SR4 and below Description The issue is related to insecure Shiro cookie configurations, which can be exploited by attackers to access sensitive information via a...

CVE-2025-29313

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

PT-2025-12712

Name of the Vulnerable Software and Affected Versions OpenDaylight Service Function Chaining SFC Subproject SFC versions Sodium-SR4 and below Description An issue in the Shiro-based RBAC Role-based Access Control mechanism allows attackers to execute privileged operations via a crafted request...

PT-2025-12710

Name of the Vulnerable Software and Affected Versions OpenDaylight Service Function Chaining SFC Subproject versions Sodium-SR4 and below Description The issue is related to the use of incorrectly resolved names or references, which can lead to a Denial of Service DoS. This allows attackers to...