GitHub Advisoryadvisory · Maven
GHSA-f2x4-547g-rp95 OpenFlow plugin for OpenDaylight LLDP Relay
HIGH
Official page ↗
- Aliases
- CVE-2015-1612
- Ecosystem
- Maven
- Packages
- org.opendaylight.openflowplugin:openflowplugin
- Severity
- High
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-20
- Reviewed
- 2025-04-22
Affected packages
• Maven org.opendaylight.openflowplugin:openflowplugin: < 0.0.6-Helium-SR3 → fixed in 0.0.6-Helium-SR3
Description
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."
Related
Alias · CVE (1)
- CVE-2015-1612 OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related… vulnerability
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-1612 advisory
- https://git.opendaylight.org/gerrit/#/c/16193 web
- https://git.opendaylight.org/gerrit/#/c/16208 web
- https://github.com/opendaylight/openflowplugin package
- https://web.archive.org/web/20150510044305/https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP web
- https://web.archive.org/web/20150701104709/https://www.internetsociety.org/sites/default/files/10_4_2.pdf web