Integer Overflow Vulnerability in Floodlight by Floodlight
CVE-2020-18684

9.8CRITICAL

Key Information:

Vendor

Atlassian
Status
Floodlight
Vendor
CVE Published:
30 September 2021

What is CVE-2020-18684?

An integer overflow vulnerability exists in Floodlight Controller through version 1.2, specifically in the checkFlow method located in StaticFlowEntryPusherResource.java. This vulnerability can be exploited through malformed priority or port number inputs, potentially allowing attackers to manipulate flow entries and compromise network integrity. Identifying and patching this flaw is crucial for maintaining network security.

References

https://drive.google.com/open?id=1310MS7djRfF0N2YmmzVTs8x...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.