OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."
References
Link | Resource |
---|---|
http://www.internetsociety.org/sites/default/files/10_4_2.pdf | Technical Description |
http://www.securityfocus.com/bid/73254 | Third Party Advisory VDB Entry |
https://cloudrouter.org/security/ | Third Party Advisory |
https://git.opendaylight.org/gerrit/#/c/16193/ | Issue Tracking Patch Third Party Advisory |
https://git.opendaylight.org/gerrit/#/c/16208/ | Issue Tracking Patch Third Party Advisory |
https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP | Patch Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2017-04-04T17:00:00
Updated: 2017-04-04T19:57:01
Reserved: 2015-02-15T00:00:00
Link: CVE-2015-1612
JSON object: View
NVD Information
Status : Analyzed
Published: 2017-04-04T17:59:00.197
Modified: 2017-04-11T17:28:04.343
Link: CVE-2015-1612
JSON object: View
Redhat Information
No data.
CWE