org.opendaylight.groupbasedpolicy:groupbasedpolicy (>=0.1.0-Helium <=0.1.2-Helium-SR2), org.opendaylight.openflowplugin:openflowplugin-extension-nicira (>=0.0.3-Helium <=0.0.5-Helium-SR2) +2 more potentially affected by CVE-2015-1611 +1 more via org.opendaylight.openflowplugin:openflowplugin (>=0.0.3-Helium <=0.0.5-Helium-SR2)

org.opendaylight.openflowplugin:openflowplugin MAVEN version =0.0.3-Helium, =0.1.0-Helium, =0.0.3-Helium, =0.0.3-Helium, =1.0.0-Helium, =1.0.2-Helium-SR2 Source cves: CVE-2015-1611, CVE-2015-1612 Source advisory: SNYK:JAVA-ORGOPENDAYLIGHTOPENFLOWPLUGIN-10393986...

org.opendaylight.groupbasedpolicy:groupbasedpolicy (>=0.1.0-Helium <=0.1.2-Helium-SR2), org.opendaylight.openflowplugin:openflowplugin-extension-nicira (>=0.0.3-Helium <=0.0.5-Helium-SR2) +2 more potentially affected by CVE-2015-1611 +1 more via org.opendaylight.openflowplugin:openflowplugin (>=0.0.3-Helium <=0.0.5-Helium-SR2)

org.opendaylight.openflowplugin:openflowplugin MAVEN version =0.0.3-Helium, =0.1.0-Helium, =0.0.3-Helium, =0.0.3-Helium, =1.0.0-Helium, =1.0.2-Helium-SR2 Source cves: CVE-2015-1611, CVE-2015-1612 Source advisory: SNYK:JAVA-ORGOPENDAYLIGHTOPENFLOWPLUGIN-10393984...

CVE-2015-1611

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."...

CVE-2015-1611

The OpenFlow plugin for OpenDaylight (before Helium SR3) is affected by LLDP spoofing via fake LLDP injections, enabling remote attackers to spoof the SDN topology and disrupt data flow. Affected component: openflowplugin in OpenDaylight; root cause: reuse/fake LLDP packets. Impact: topology spoo...