OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

MEDIO 6.5CVE-2024-46942 · GHSA-hv38-h5pj-c96j · Published 15/09/2024 · updated 17/06/2026

En resumen

CVE-2024-46942 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a org.opendaylight.mdsal:mdsal-artifacts, model-driven service abstraction layer (opendaylight).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.44%, mayor que el 38.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
org.opendaylight.mdsal:mdsal-artifacts Maven	`≤ 13.0.1`	No fix yet
model-driven service abstraction layer opendaylight	`≤ 13.0.1`	No fix yet

Description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

NVD description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

References

nvd.nist.gov/vuln/detail/CVE-2024-46942 · ADVISORY
docs.opendaylight.org/en/latest/release-notes/projects/mdsal.html · WEB
doi.org/10.48550/arXiv.2408.16940 · WEB
opendaylight/mdsal · PACKAGE
lf-opendaylight.atlassian.net/browse/MDSAL-869 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free