Description
OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenDayLight | OpenDayLight | Carbon SR3 | — |