Opendaylight vulnerabilities

Products

• Opendaylight 9
• Openflow 4

Newest

• opendaylight aaa, authentication\, authorization and accounting +1 more OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability CVE-2024-46943 7.5 HighSeptember 15, 2024
• opendaylight md-sal, model-driven service abstraction layer +1 more OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries CVE-2024-46942 6.5 MediumSeptember 15, 2024
• [unknown] opendaylight, opendaylight sdninterfaceapp +1 more A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component... CVE-2018-1132 7.5 HighJune 20, 2018
• [unknown] opendaylight, opendaylight openflow +1 more OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation... CVE-2018-1078 9.8 CriticalMarch 16, 2018
• opendaylight, opendaylight openflow +1 more OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil... CVE-2017-1000411 7.5 HighJanuary 31, 2018
• opendaylight karaf Password change doesn't result in Karaf clearing cache CVE-2017-1000406 7.5 HighNovember 30, 2017
• opendaylight Opendaylight will authenticate any username and password combination CVE-2015-1778 Fix available 9.8 CriticalJune 27, 2017
• opendaylight defense4all OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data... CVE-2014-8149 8.8 HighJune 27, 2017
• opendaylight OpenDaylight Controller DoS CVE-2017-1000361 Fix available 7.5 HighApril 24, 2017
• opendaylight OpenDaylight NULL Pointer Dereference CVE-2017-1000360 5.3 MediumApril 24, 2017
• opendaylight Java out of memory error and significant increase in resource consumption. Component:... CVE-2017-1000359 5.3 MediumApril 24, 2017
• opendaylight Controller throws an exception and does not allow user to add subsequent flow for a particular... CVE-2017-1000358 6.5 MediumApril 24, 2017
• opendaylight Denial of Service attack when the switch rejects to receive packets from the controller.... CVE-2017-1000357 7.5 HighApril 24, 2017
• opendaylight openflow OpenFlow plugin for OpenDaylight LLDP Relay CVE-2015-1612 Fix available 7.5 HighApril 4, 2017
• opendaylight openflow OpenFlow plugin for OpenDaylight allows spoofing the SDN topology CVE-2015-1611 Fix available 7.5 HighApril 4, 2017
• opendaylight l2switch hosttracker in OpenDaylight l2switch allows remote attackers to change the host location... CVE-2015-1610 5.3 MediumMarch 20, 2017
• opendaylight The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via... CVE-2014-5035 6.8 MediumAugust 26, 2014