OpenDayLight

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

OpenDayLight records in CISA KEV

No OpenDayLight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Opendaylight 8 records MEDIUM Openflow 4 records MEDIUM Authentication, Authorization And Accounting 1 record MEDIUM Defense4all 1 record MEDIUM Karaf 1 record LOW L2switch 1 record LOW Model-driven Service Abstraction Layer 1 record MEDIUM Sdninterfaceapp 1 record MEDIUM

Records

4 records in Openflow · all components

TI-2018-00997 CVE-2018-1078 · GHSA-fq54-gw3q-6v86

Improper input validation in OpenDayLight

MEDIUM 44

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset re…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01208 Published 2018-03-16 Will not fix CWE-20

TI-2015-01444 CVE-2015-1612 · GHSA-f2x4-547g-rp95

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the…

LOW 37

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02073 Published 2017-04-04 Fixed in 0.0.6-Helium-SR3 CWE-20

TI-2015-01443 CVE-2015-1611 · GHSA-49wf-927p-jpvj

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the…

LOW 37

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02073 Published 2017-04-04 Fixed in 0.0.6-Helium-SR3 CWE-20

TI-2017-14630 CVE-2017-1000411 · GHSA-wrhh-rh53-55jj

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert…

LOW 36

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROL…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01572 Published 2018-01-31 Will not fix CWE-404

Open these records in search →

Critical	5
High	7
Medium	5
Low	0
No CVSS	0