HIGH🇬🇧 English

CVE-2017-1000357

CVSS 7.5v3.0pub. 2017-04-24upd. 2026-05-13

Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 (Lithium-SR3), 3.4 (Lithium-SR4), 4.0 (Beryllium), 4.1 (Beryllium-SR1), 4.2 (Beryllium-SR2), and 4.4 (Beryllium-SR4) are affected by this flaw. Java version is openjdk version 1.8.0_91.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • Opendaylight

    APP
    Opendaylight
    3.34.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2015-1778CRITICAL9.8ten sam produkt

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 ...

CVE-2017-1000411HIGH7.5ten sam produkt

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi conta...

CVE-2017-1000361HIGH7.5ten sam produkt

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launche...

CVE-2017-1000359MEDIUM5.3ten sam produkt

Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-x...

CVE-2017-1000358MEDIUM6.5ten sam produkt

Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Compone...