CVE-2015-1612 OpenFlow plugin for OpenDaylight LLDP Relay
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.opendaylight.openflowplugin/openflowplugin(Maven) | < 0.0.6-Helium-SR3 | 0.0.6-Helium-SR3 |
| org.opendaylight.openflowplugin/openflowplugin(Maven) | = 0.0.1 | No fix listed |
| org.opendaylight.openflowplugin/openflowplugin(Maven) | = 0.0.2 | No fix listed |
| org.opendaylight.openflowplugin/openflowplugin(Maven) | = 0.0.3-Helium | No fix listed |
| org.opendaylight.openflowplugin/openflowplugin(Maven) | = 0.0.4-Helium-SR1 | No fix listed |
| org.opendaylight.openflowplugin/openflowplugin(Maven) | = 0.0.4-Helium-SR1.1 | No fix listed |
| org.opendaylight.openflowplugin/openflowplugin(Maven) | = 0.0.5-Helium-SR2 | No fix listed |
| opendaylight openflow | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- git.opendaylight.org issue-tracking patch third-party-advisory
- github.com product
- web.archive.org
- web.archive.org
- www.internetsociety.org technical-description
- 73254 third-party-advisory vdb-entry
- cloudrouter.org third-party-advisory
- wiki.opendaylight.org patch third-party-advisory
- github.com