OpenDaylight Controller DoS

2022-05-1301:41:13

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.

CPENameOperatorVersion
org.opendaylight.controller:releasepomeq0.3.4-Beryllium-SR4
org.opendaylight.controller:releasepomeq0.4.3-Boron-SR3
org.opendaylight.controller:releasepomeq0.7.0
org.opendaylight.controller:releasepomeq0.4.0-Boron
org.opendaylight.controller:releasepomeq0.6.3
org.opendaylight.controller:releasepomeq0.1.3-Helium-SR1
org.opendaylight.controller:releasepomeq0.8.0
org.opendaylight.controller:releasepomeq0.8.1
org.opendaylight.controller:releasepomeq0.4.1-Boron-SR1
org.opendaylight.controller:releasepomeq0.1.1

Name	Operator	Version
org.opendaylight.controller:releasepom	eq	0.3.4-Beryllium-SR4
org.opendaylight.controller:releasepom	eq	0.4.3-Boron-SR3
org.opendaylight.controller:releasepom	eq	0.7.0
org.opendaylight.controller:releasepom	eq	0.4.0-Boron
org.opendaylight.controller:releasepom	eq	0.6.3
org.opendaylight.controller:releasepom	eq	0.1.3-Helium-SR1
org.opendaylight.controller:releasepom	eq	0.8.0
org.opendaylight.controller:releasepom	eq	0.8.1
org.opendaylight.controller:releasepom	eq	0.4.1-Boron-SR1
org.opendaylight.controller:releasepom	eq	0.1.1