CVE-2018-1078CWE-20

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or…

published March 16, 2018

CVSS
—
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

⚠️ A node reconciliation hiccup in OpenDaylight allows expired traffic to come back from the dead! This means those traffic flows that should be long gone might just hang around for a little too long. 🔄 Think of it like a restaurant that keeps sending out old food orders to the kitchen instead of throwing them out. The diners don’t realize they’re getting yesterday’s specials that should have been discarded! This could lead to unauthorized traffic flowing through your network, causing potential data leaks or interruptions. It’s like allowing expired products on shelves, which can confuse and harm your customers; you want to keep your network fresh and secure!

Put simply

Think of it like a restaurant that keeps sending out old food orders to the kitchen instead of throwing them out. The diners don’t realize they’re getting yesterday’s specials that should have been discarded! During the node reconciliation process, OpenDaylight versions Carbon SR3 and earlier improperly handle expired traffic flows, mistakenly re-installing them and resetting their timers instead of removing them as intended.

What to do

This could lead to unauthorized traffic flowing through your network, causing potential data leaks or interruptions. It’s like allowing expired products on shelves, which can confuse and harm your customers; you want to keep your network fresh and secure! To mitigate this vulnerability, upgrade to a later version of OpenDaylight that resolves this issue. Regularly review and monitor your network traffic flows to ensure that no expired flows are being re-installed. You’ve got this! With a quick upgrade and vigilant monitoring, your network will be back in top shape in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01208 · 68.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-03-16T20:00Z
EPSS history
Timeline
  • 16 MAR 20:00Z
    OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or…
    cvelistv5