-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.opendaylight.sfc:odl-sfc-openflow-renderer | maven | ||
| org.opendaylight.sfc:odl-sfc-ovs | maven |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing name collision checks when mapping Service Function Forwarders (SFFs) to OVS switches. The blog reproduction shows attackers can create conflicting SFFs via RESTCONF, which triggers DPID changes and flow table invalidation. The OvsSfcProvider.createOvsBridge function (SFC-OVS) handles bridge creation without verifying existing OVSDB node names, while OpenFlowRenderer.renderServiceFunctionForwarder (OpenFlow Renderer) processes SFF-to-switch mappings without namespace validation. Both functions directly contribute to the improper resource management described in CWE-404, as they allow uncontrolled overwrites of critical network resources.
Ongoing coverage of React2Shell