CVE-2017-1000361

HIGH7.5EPSS 0.49%

OpenDaylight Controller DoS

Published: 5/13/2022Modified: 12/4/2024

Description

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.

Affected packages (1)

Maven/org.opendaylight.controller:releasepomfrom 0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2017-1000361
WEBhttps://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf