OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

MITTEL 6.5CVE-2024-46942 · GHSA-hv38-h5pj-c96j · Published 15/09/2024 · updated 17/06/2026

Kurz gesagt

CVE-2024-46942 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in org.opendaylight.mdsal:mdsal-artifacts, model-driven service abstraction layer (opendaylight).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.44%, höher als bei 38.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
org.opendaylight.mdsal:mdsal-artifacts Maven	`≤ 13.0.1`	No fix yet
model-driven service abstraction layer opendaylight	`≤ 13.0.1`	No fix yet

Description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

NVD description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

References

nvd.nist.gov/vuln/detail/CVE-2024-46942 · ADVISORY
docs.opendaylight.org/en/latest/release-notes/projects/mdsal.html · WEB
doi.org/10.48550/arXiv.2408.16940 · WEB
opendaylight/mdsal · PACKAGE
lf-opendaylight.atlassian.net/browse/MDSAL-869 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free