Vulnerabilities > Opendaylight > Openflow > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-01-31 CVE-2017-1000411 Improper Resource Shutdown or Release vulnerability in Opendaylight and Openflow
OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown.
network
low complexity
opendaylight CWE-404
5.0
2017-04-04 CVE-2015-1612 Improper Input Validation vulnerability in Opendaylight Openflow
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."
network
low complexity
opendaylight CWE-20
5.0
2017-04-04 CVE-2015-1611 Improper Input Validation vulnerability in Opendaylight Openflow
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."
network
low complexity
opendaylight CWE-20
5.0