CVE-2014-2304

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller…

published October 23, 2019

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURES_REPLY messages cause the controller service to not delete switch and port data from its internal tracking structures.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01099 · 65.4th percentile
Published
2019-10-23T17:01Z
EPSS history
Timeline
  • 23 OCT 17:01Z
    A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller…
    cvelistv5