VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 24, 2017· Updated Jun 17, 2026

CVE-2017-1000357

CVE-2017-1000357

Description

Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 (Lithium-SR3), 3.4 (Lithium-SR4), 4.0 (Beryllium), 4.1 (Beryllium-SR1), 4.2 (Beryllium-SR2), and 4.4 (Beryllium-SR4) are affected by this flaw. Java version is openjdk version 1.8.0_91.

Affected products

4
  • Opendaylight/Opendaylight3 versions
    cpe:2.3:a:opendaylight:opendaylight:3.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:opendaylight:opendaylight:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:opendaylight:opendaylight:4.0:*:*:*:*:*:*:*
    • (no CPE)range: 3.3, 3.4, 4.0, 4.1, 4.2, 4.4
  • Opendaylight/L2switchllm-fuzzy
    Range: 3.3, 3.4, 4.0, 4.1, 4.2, 4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.