CVE-2015-1612: Input Validation
Published Apr 4, 2017
·Updated
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."
Affected Software
2 affected componentsFixes available
OpenDayLight Openflow Opendaylight
maven/org.opendaylight.openflowplugin:openflowplugin<0.0.6-Helium-SR3
0.0.6-Helium-SR3
Remediation
Patch Available
Patch Available
Event History
Apr 4, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·02:50 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-1612?
CVE-2015-1612 is considered to be of medium severity due to its potential impact on SDN topology spoofing.
2
How do I fix CVE-2015-1612?
To mitigate CVE-2015-1612, it is recommended to upgrade to the latest version of OpenDaylight beyond Helium SR3.
3
Who is affected by CVE-2015-1612?
All users of OpenDaylight with the OpenFlow plugin prior to Helium SR3 are affected by CVE-2015-1612.
4
What is the impact of CVE-2015-1612?
CVE-2015-1612 allows remote attackers to spoof the SDN topology, potentially compromising the flow of data.
5
Is CVE-2015-1612 related to packet reuse?
Yes, CVE-2015-1612 is related to the reuse of LLDP packets in the OpenFlow plugin.