Integer Overflow Vulnerability in Floodlight by Floodlight

CVE-2020-18684

Summary

An integer overflow vulnerability exists in Floodlight Controller through version 1.2, specifically in the checkFlow method located in StaticFlowEntryPusherResource.java. This vulnerability can be exploited through malformed priority or port number inputs, potentially allowing attackers to manipulate flow entries and compromise network integrity. Identifying and patching this flaw is crucial for maintaining network security.

References