CVE-2018-1078: Input Validation
First published: Thu Jan 11 2018(Updated: )
It was found that all the flows, including active and inactive, in the config datastore are installed back in switch upon reconnection, as part of the node reconciliation process in OpenDayLight. This may lead to denial of service via table overflow or possibly circumventiagn of controller's control.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenDaylight | <=carbon | |
| OpenDaylight | =sp1 | |
| OpenDaylight | =sp2 | |
| OpenDaylight | =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-1078?
CVE-2018-1078 is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2018-1078?
To mitigate CVE-2018-1078, you should upgrade to the latest version of OpenDaylight that addresses this issue.
What versions of OpenDaylight are affected by CVE-2018-1078?
CVE-2018-1078 affects OpenDaylight versions up to and including carbon, as well as specific SP1, SP2, and SP3 releases.
What are the risks associated with CVE-2018-1078?
The risks associated with CVE-2018-1078 include table overflow and potential circumvention of the controller's control.
Is there a patch available for CVE-2018-1078?
Yes, patches to fix CVE-2018-1078 are available in the updated versions of OpenDaylight.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-1078
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/opendaylight
- canonical/opendaylight
- version/opendaylight/carbon
- version/opendaylight/sp1
- version/opendaylight/sp2
- version/opendaylight/sp3