https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/L2SWITCH-36 l2switch <p>It has been reported that it is possible for an attacker to spoof network topology via hosttracker. Details are in this paper:</p> <p><a href="http://www.internetsociety.org/sites/default/files/10_4_2.pdf" class="external-link" target="_blank" rel="nofollow noopener">http://www.internetsociety.org/sites/default/files/10_4_2.pdf</a></p> <p>This issue is related to well-known MAC spoofing attacks. It is proposed that this problem should be solved in the long run by implementing new features in the l2switch project that would allow an administrator to configure a policy regarding multiple MAC addresses inside a network. The policy options would be accept or deny. Note that the deny policy would possibly cause problems on wireless environments where a host is always moving from one side to another.</p> <p>MITRE has been contacted requesting a CVE name for this issue.</p> <p>Operating System: All<br/> Platform: All</p> L2SWITCH-36

[SECURITY] Topology spoofing via hosttracker

Bug Confirmed Unresolved Unassigned David Jorm Mon, 16 Feb 2015 00:54:52 +0000 Thu, 19 Oct 2017 21:28:08 +0000 unspecified General 0 3 <p>CVE-2015-1610 has been assigned to this issue. On the TSC list it has been suggested that an SR3 release is shipped on 3/30. Would it be possible to include a fix for this issue in SR3?</p> Development External issue ID 2724 External issue URL Priority Rank 0|i01z5b: