OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

MEDIO 6.5CVE-2024-46942 · GHSA-hv38-h5pj-c96j · Published 15/09/2024 · updated 17/06/2026

In breve

CVE-2024-46942 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda org.opendaylight.mdsal:mdsal-artifacts, model-driven service abstraction layer (opendaylight).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.44%, superiore al 38.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
org.opendaylight.mdsal:mdsal-artifacts Maven	`≤ 13.0.1`	No fix yet
model-driven service abstraction layer opendaylight	`≤ 13.0.1`	No fix yet

Description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

NVD description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

References

nvd.nist.gov/vuln/detail/CVE-2024-46942 · ADVISORY
docs.opendaylight.org/en/latest/release-notes/projects/mdsal.html · WEB
doi.org/10.48550/arXiv.2408.16940 · WEB
opendaylight/mdsal · PACKAGE
lf-opendaylight.atlassian.net/browse/MDSAL-869 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free