CVE-2024-37018

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-648

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
linuxfoundation	opendaylight	0.15.3

References

Timeline

Published: May 31, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-370199.8Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication.CVE-2024-370203.8Sequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an a CVE-2024-370215.5In the Linux kernel, the following vulnerability has been resolved: fpga: manager: add owner module and take its refcount The current impl CVE-2024-370227.8Fuji Electric Tellus Lite V-Simulator is vulnerable to an out-of-bounds write, which could allow an attacker to manipulate memory, resultin CVE-2024-370239.9Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software version CVE-2024-370246.7Uncontrolled search path for some ACAT software maintained by Intel(R) for Windows before version 3.11.0 may allow an authenticated user to CVE-2024-370256.7Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 m CVE-2024-370265.5In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm migrate exec queue The CVE-2024-370276.1Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentiall CVE-2024-370285.3BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in. Note: Software versions which have CVE-2024-370297.8Fuji Electric Tellus Lite V-Simulator is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary co CVE-2024-37034.7The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputting them back in the