CVE-2018-1078
Critical
Description
OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired.
SeverityCritical
CVSS9.8
Exploit probability—
ProductOpendaylight Openflow
PublishedMar 16, 2018
First seenMar 16, 2018
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opendaylight openflow | v ≤ carbon, sp1, sp2, sp3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.