OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath IDentifier) in the features_reply message are inherently trusted by the controller. that can result in Denial of Service, Unauthorized Access, Network Instability. This attack appear to be exploitable via Network connectivity: the attacker must first establish a transport connection with the OpenFlow controller and then initiate the OpenFlow handshake.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-05-24T13:00:00
Updated: 2024-08-05T12:33:49.308Z
Reserved: 2018-04-03T00:00:00
Link: CVE-2018-1000155
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-05-24T13:29:01.243
Modified: 2024-11-21T03:39:48.580
Link: CVE-2018-1000155
Redhat