CVE-2018-1078

N/A

Descricao

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/16/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

opendaylight:openflow

Fraquezas (CWE)

CWE-20

Referencias

https://bugzilla.redhat.com/show_bug.cgi?id=1533501(secalert@redhat.com)

https://jira.opendaylight.org/browse/OPNFLWPLUG-971(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=1533501(af854a3a-2127-422b-91ae-364da2661108)

https://jira.opendaylight.org/browse/OPNFLWPLUG-971(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.