An issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial of service via the datapath id component.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://github.com/floodlight/floodlight/issues/867 | exploit issue tracking |
https://gist.github.com/ErodedElk/399a226905c574efe705e3bff77955e3 | exploit third party advisory |