CVE-2017-1000357 - CVE House
Back to Database
Status published High CVE-2017-1000357

Denial of Service attack when the switch rejects to receive...

Vulnerability Description

Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 (Lithium-SR3), 3.4 (Lithium-SR4), 4.0 (Beryllium), 4.1 (Beryllium-SR1), 4.2 (Beryllium-SR2), and 4.4 (Beryllium-SR4) are affected by this flaw. Java version is openjdk version 1.8.0_91.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-1000357

Credits & Attribution

No credits recorded in the NVD database.

References

More from opendaylight

View All →
CVE-2017-1000411
OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert...
High 7.5
CVE-2017-1000406
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a...
High 7.5
CVE-2017-1000361
DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions...
High 7.5
CVE-2017-1000360
StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in...
Medium 5.3
CVE-2017-1000359
Java out of memory error and significant increase in resource...
Medium 5.3

Affected Vendor

opendaylight

View all reports →

Affected Software

opendaylight
Vulnerable Versions:
3.3, 4.0

Timeline

Official Publish: April 24th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.