CVE-2015-1612

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."

• CWE-20

• http://www.internetsociety.org/sites/default/files/10_4_2.pdfTechnical Description
• http://www.securityfocus.com/bid/73254Third Party Advisory, VDB Entry
• https://cloudrouter.org/security/Third Party Advisory
• https://git.opendaylight.org/gerrit/#/c/16193/Issue Tracking, Patch, Third Party Advisory
• https://git.opendaylight.org/gerrit/#/c/16208/Issue Tracking, Patch, Third Party Advisory
• https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDPPatch, Third Party Advisory
• http://www.internetsociety.org/sites/default/files/10_4_2.pdfTechnical Description
• http://www.securityfocus.com/bid/73254Third Party Advisory, VDB Entry
• https://cloudrouter.org/security/Third Party Advisory
• https://git.opendaylight.org/gerrit/#/c/16193/Issue Tracking, Patch, Third Party Advisory
• https://git.opendaylight.org/gerrit/#/c/16208/Issue Tracking, Patch, Third Party Advisory
• https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDPPatch, Third Party Advisory

Published

Apr 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1606The keyring DB in GnuPG before 2.1.2 does not properly handl…5.5
• CVE-2015-1607kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0…5.5
• CVE-2015-1608Topline Opportunity Form (aka XLS Opp form) before 2015-02-1…
• CVE-2015-1609MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote a…
• CVE-2015-1610hosttracker in OpenDaylight l2switch allows remote attackers…
• CVE-2015-1611OpenFlow plugin for OpenDaylight before Helium SR3 allows re…
• CVE-2015-1613RhodeCode before 2.2.7 allows remote authenticated users to …
• CVE-2015-1614Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-1616SQL injection vulnerability in the ePO extension in McAfee D…
• CVE-2015-1617Cross-site scripting (XSS) vulnerability in the ePO extensio…
• CVE-2015-1618The ePO extension in McAfee Data Loss Prevention Endpoint (D…
• CVE-2015-1619Cross-site scripting (XSS) vulnerability in the Secure Web M…