CVE-2014-2304 - CVE House
Back to Database
Status published High CVE-2014-2304

A vulnerability in version 0.90 of the Open Floodlight SDN...

Vulnerability Description

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed and mistimed FEATURES_REPLY messages cause the controller service to not delete switch and port data from its internal tracking structures.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2304

Credits & Attribution

No credits recorded in the NVD database.

References

More from projectfloodlight

View All →
CVE-2018-1000163
Floodlight version 1.2 and earlier contains a Cross Site Scripting...
Medium 6.1
CVE-2013-7333
A vulnerability in version 0.90 of the Open Floodlight SDN...
High 7.5

Affected Vendor

projectfloodlight

View all reports →

Affected Software

open sdn controller
Vulnerable Versions:
0.90

Timeline

Official Publish: October 23rd, 2019
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.