CVE-2024-51406

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-51406

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-51406.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-51406

Published

2024-11-01T00:00:00Z

Modified

2026-07-15T01:49:00.061582810Z

Severity

6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51406.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/floodlight/floodlight

Affected ranges

Type

GIT

Repo

https://github.com/floodlight/floodlight

Events

Introduced

27be59b9730062b9f0a7ddbd8cc411755c306cae

Last affected

27be59b9730062b9f0a7ddbd8cc411755c306cae

Database specific

{
    "cpe": "cpe:2.3:a:projectfloodlight:open_sdn_controller:1.2:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.2"
        },
        {
            "last_affected": "1.2"
        }
    ]
}

Affected versions

1.*

1.2

v1.*

v1.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-51406.json"