Vulnerability Details : CVE-2018-1000617
Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoS(thread crash).. This attack appear to be exploitable via network connectivity (Remote attack).
Vulnerability category: Input validationDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2018-1000617
Probability of exploitation activity in the next 30 days: 0.13%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 47 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2018-1000617
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
|
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2018-1000617
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-1000617
-
http://www.securityfocus.com/bid/104711
Atlassian Floodlight Controller CVE-2018-1000617 Denial of Service VulnerabilityThird Party Advisory;VDB Entry
-
http://gms.cl0udz.com/Floodlight_DoS.pdf
Exploit;Mailing List;Third Party Advisory
Products affected by CVE-2018-1000617
- cpe:2.3:a:atlassian:floodlight_controller:*:*:*:*:*:*:*:*