109 matches found
CVE-2020-18684
Floodlight OpenFlow controller (affected up to 1.2) contains an integer overflow in StaticFlowEntryPusherResource.java: checkFlow via priority or port number. This is the root cause described across multiple sources. Current documents do not provide a confirmed patch version or remediation detail...
CVE-2020-18684
Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number...
Floodlight 输入验证错误漏洞
Floodlight is an open source OpenFlow controller. Floodlight is vulnerable to an integer overflow vulnerability, which stems from the software having an integer overflow in the checkFlow of StaticFlowEntryPusherResource.java via priority or port number. No detailed vulnerability details are...
Floodlight 输入验证错误漏洞
Floodlight is a leading open source OpenFlow controller. An input validation error vulnerability exists in Floodlight version 1.2, which stems from mishandling of undefined fields and incomplete input validation in the checkFlow of StaticFlowEntryPusherResource.java...
Floodlight 输入验证错误漏洞
Floodlight is a leading open source OpenFlow controller. An input validation error vulnerability exists in Floodlight version 1.2, which stems from the software having poor input validation in the checkFlow in StaticFlowEntryPusherResource.java, as there is no checking of prerequisites related to...
CVE-2014-2304
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURESREPLY messages cause...
Design/Logic Flaw
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURESREPLY messages cause...
CVE-2013-7333
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices...
Design/Logic Flaw
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices...
CVE-2014-2304
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURESREPLY messages cause...
CVE-2014-2304
The connected records identify CVE-2014-2304 as affecting Open Floodlight SDN controller version 0.90. The root cause is a flaw in OpenFlow protocol processing where malformed and mistimed FEATURES_REPLY messages cause the controller to fail to delete switch and port data from internal tracking s...
CVE-2013-7333
Open Floodlight SDN controller version 0.90 is affected by CVE-2013-7333. The vulnerability allows an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the controller, leading to degradation and eventual denial of network access for devices co...
CVE-2013-7333
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices...
Input validation
Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...
CVE-2018-1000617
Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...
CVE-2018-1000617
Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...
CVE-2018-1000617
Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...
CVE-2018-1000617
Atlassian Floodlight Controller versions 1.2 and earlier are affected by a Denial of Service in the Forwarding module due to an improper type cast. This remote, network-exploitable issue can cause thread crashes. The provided documents do not specify a remediation version or patch details.
Cross site scripting
Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...
CVE-2018-1000163
Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...