CVE-2015-1611: Input Validation
Published Apr 4, 2017
·Updated
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."
Affected Software
2 affected componentsFixes available
OpenDayLight Openflow Opendaylight
maven/org.opendaylight.openflowplugin:openflowplugin<0.0.6-Helium-SR3
0.0.6-Helium-SR3
Remediation
Patch Available
Patch Available
Event History
Apr 4, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·02:50 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-1611?
CVE-2015-1611 has a medium severity level due to its potential impact on the SDN topology.
2
How do I fix CVE-2015-1611?
To fix CVE-2015-1611, upgrade to OpenDaylight Helium SR3 or a later version.
3
Who is affected by CVE-2015-1611?
CVE-2015-1611 affects users of the OpenFlow plugin for OpenDaylight versions prior to Helium SR3.
4
What type of attack is associated with CVE-2015-1611?
CVE-2015-1611 is associated with remote spoofing attacks that can affect the flow of data.
5
What is the impact of CVE-2015-1611 on network security?
The impact of CVE-2015-1611 on network security includes potential unauthorized manipulation of SDN topology.