CVE-2018-1078
CRITICALOpenDayLight Carbon SR3 and earlier - Improper Input Validation during Node Reconciliation
Title source: llmDescription
OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired.
References (2)
Core 2
Core References
Issue Tracking, Not Applicable x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1533501
Third Party Advisory x_refsource_confirm
https://jira.opendaylight.org/browse/OPNFLWPLUG-971
Scores
CVSS v3
9.8
EPSS
0.0125
EPSS Percentile
65.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (4)
opendaylight/openflow
sp1
opendaylight/openflow
sp2
opendaylight/openflow
sp3
opendaylight/openflow
< carbon
Published
Mar 16, 2018
Tracked Since
Feb 18, 2026