Skip to content

← Public intelligence

Maven package

org.opendaylight.openflowplugin:openflowplugin

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 7.5MavenPublished

    OpenFlow plugin for OpenDaylight LLDP Relay

    CVE-2015-1612 · GHSA-f2x4-547g-rp95

    Affected
    • Maven org.opendaylight.openflowplugin:openflowplugin < 0.0.6-Helium-SR3
    Fixed in
    0.0.6-Helium-SR3· Vendor fix available
    Issue
    OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."

    Recommended action: Upgrade to 0.0.6-Helium-SR3 (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →
  2. High, CVSS 7.5MavenPublished

    OpenFlow plugin for OpenDaylight allows spoofing the SDN topology

    CVE-2015-1611 · GHSA-49wf-927p-jpvj

    Affected
    • Maven org.opendaylight.openflowplugin:openflowplugin < 0.0.6-Helium-SR3
    Fixed in
    0.0.6-Helium-SR3· Vendor fix available
    Issue
    OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."

    Recommended action: Upgrade to 0.0.6-Helium-SR3 (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →