CVE-2017-1000358 : Security Advisory and Response

OpenDaylight controller vulnerability affecting version 4.0.

Understanding CVE-2017-1000358

A flaw in the OpenDaylight odl-restconf feature prevents users from adding additional flows for a specific switch.

What is CVE-2017-1000358?

The vulnerability in OpenDaylight version 4.0 causes the controller to raise an exception, hindering the addition of subsequent flows for a particular switch.

The Impact of CVE-2017-1000358

Users are unable to add additional flow entries for a specific switch, impacting network management and configuration.

Technical Details of CVE-2017-1000358

The technical aspects of the vulnerability.

Vulnerability Description

The flaw in the OpenDaylight odl-restconf feature results in the controller throwing an exception, restricting the user from adding further flow entries.

Affected Systems and Versions

OpenDaylight version 4.0 is susceptible to this issue.

Exploitation Mechanism

Exploiting this vulnerability requires access to the affected OpenDaylight controller and the ability to trigger the exception.

Mitigation and Prevention

Steps to mitigate and prevent the CVE-2017-1000358 vulnerability.

Immediate Steps to Take

Implement network segmentation to limit the impact of the vulnerability.
Regularly monitor and audit flow entries to detect any unauthorized changes.

Long-Term Security Practices

Keep OpenDaylight and related components up to date with the latest security patches.
Conduct regular security training for network administrators to enhance awareness of potential vulnerabilities.

Patching and Updates

Apply patches provided by OpenDaylight to address the vulnerability and prevent exploitation.