CVE-2017-1000361

CVSS 7.5v3.0pub. 2017-04-24upd. 2026-05-13

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.

oryginał EN

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Opendaylight
APP
Opendaylight
3.34.0

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

CWE

NVD-CWE-noinfo

Referencje

aaltodoc.aalto.fi/bitstream/handle/123456789/21584/mast…

Powiązane podatności

CVE-2015-1778CRITICAL9.8ten sam produkt

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 ...

CVE-2017-1000411HIGH7.5ten sam produkt

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi conta...

CVE-2017-1000357HIGH7.5ten sam produkt

Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulne...

CVE-2017-1000358MEDIUM6.5ten sam produkt

Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Compone...

CVE-2017-1000359MEDIUM5.3ten sam produkt

Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-x...