CVE-2014-2304 | BDVDB-2026-124804 Detail

Description#

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURES_REPLY messages cause the controller service to not delete switch and port data from its internal tracking structures.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dovernetworks.com/wp-content/uploads/2014/03/OpenFloodlight-03052014.pdf

Exploit#

No public exploit known

History#

Version 12019-10-23Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.