CVE-2017-1000361

High

Published: 24/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

OpenDaylight is vulnerable to the DOMRpcImplementationNotAvailableException when sending Port-Status packets. This causes the controller to throw exceptions and consume more CPU resources.

Risk Assessment

This vulnerability may lead to increased system load, potentially affecting the performance and stability of services managed by OpenDaylight.

Recommendation

It is recommended to upgrade to the latest version of OpenDaylight to mitigate the risks associated with this issue.

Other vulnerabilities in OpenDaylight

CVE-2015-1778Critical
The custom authentication realm used by karaf-tomcat's 'opendaylight' realm in Opendaylight before Helium SR3 will authenticate any username and password combination.

Original NVD description (English source)

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.