Miggo Logo
Miggo Vulnerability Database
→
CVE-2017-1000360

CVE-2017-1000360: OpenDaylight NULL Pointer Dereference

5.3

CVSS Score
3.0

Basic Information

CVE ID
CVE-2017-1000360
GHSA ID
GHSA-gjq3-997p-hg6f
EPSS Score
0.59029%
CWE
CWE-476
Published
5/13/2022
Updated
8/9/2023
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.opendaylight.controller:releasepommaven<= 4.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The provided vulnerability information lacks concrete technical details about the implementation, such as code snippets, commit diffs, or patch information. While the CWE-476 (NULL Pointer Dereference) and component (odl-mdsal-xsql) are identified, there is no specific mention of function names, file paths, or code patterns that would allow precise identification of vulnerable functions. The references to StreamCorruptedException and NullPointerException suggest potential issues in deserialization or data processing logic, but without access to the source code or detailed technical reports (e.g., the cited master's thesis), it is impossible to determine the exact vulnerable functions with high confidence.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

Str**m*orrupt***x**ption *n* NullPoint*r*x**ption in Op*n**yli**t o*l-m*s*l-xsql. *ontroll*r l*un***s *x**ptions in t** *onsol*. *ompon*nt: Op*n**yli**t o*l-m*s*l-xsql is vuln*r**l* to t*is *l*w. V*rsion: T** t*st** v*rsions *r* Op*n**yli**t *.* *n*

Reasoning

T** provi*** vuln*r**ility in*orm*tion l**ks *on*r*t* t***ni**l **t*ils **out t** impl*m*nt*tion, su** *s *o** snipp*ts, *ommit *i**s, or p*t** in*orm*tion. W*il* t** *W*-*** (NULL Point*r **r***r*n**) *n* *ompon*nt (o*l-m*s*l-xsql) *r* i**nti*i**, t