OpenDayLight

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

OpenDayLight records in CISA KEV

No OpenDayLight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Opendaylight 8 records MEDIUM Openflow 4 records MEDIUM Authentication, Authorization And Accounting 1 record MEDIUM Defense4all 1 record MEDIUM Karaf 1 record LOW L2switch 1 record LOW Model-driven Service Abstraction Layer 1 record MEDIUM Sdninterfaceapp 1 record MEDIUM

Records

8 records in Opendaylight · all components

TI-2015-01596 CVE-2015-1778 · GHSA-qm24-4869-99pj

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in…

MEDIUM 47

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02737 Published 2017-06-27 Fixed in 0.2.3-Helium-SR3 CWE-287

TI-2017-14630 CVE-2017-1000411 · GHSA-wrhh-rh53-55jj

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert…

LOW 36

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROL…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01572 Published 2018-01-31 Will not fix CWE-404

TI-2017-14581 CVE-2017-1000361 · GHSA-8p5x-w9cv-92hv

DOMRpcImplementationNotAvailableException when sending Port-Status packets to…

LOW 36

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01402 Published 2017-04-24 Will not fix

TI-2017-14577 CVE-2017-1000357 · GHSA-47cr-xw67-rm48

Denial of Service attack when the switch rejects to receive packets from the controller.

LOW 36

Denial of Service attack when the switch rejects to receive packets from the controller.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01402 Published 2017-04-24 No fix listed CWE-400

TI-2014-04137 CVE-2014-5035 · GHSA-h2c7-f7r2-xmqp

The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary…

LOW 35

The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference in an XML-RPC message, related to an XML Extern…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02486 Published 2014-08-26 No fix listed

TI-2017-14578 CVE-2017-1000358 · GHSA-jmhq-85wq-82m7

Controller throws an exception and does not allow user to add subsequent flow for a…

LOW 31

Controller throws an exception and does not allow user to add subsequent flow for a particular switch.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01106 Published 2017-04-24 Will not fix CWE-476

TI-2017-14580 CVE-2017-1000360 · GHSA-gjq3-997p-hg6f

StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql.

LOW 27

StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01311 Published 2017-04-24 Will not fix CWE-476

TI-2017-14579 CVE-2017-1000359 · GHSA-p2gp-vrvq-3883

Java out of memory error and significant increase in resource consumption.

LOW 27

Java out of memory error and significant increase in resource consumption.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01311 Published 2017-04-24 Will not fix CWE-400

Open these records in search →

Critical	5
High	7
Medium	5
Low	0
No CVSS	0