hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka “topology spoofing.”
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1610
Reference (s):
- BID:73251
- URL: http://www.securityfocus.com/bid/73251
- https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1610_l2switch:_topology_spoofing_via_hosttracker
- http://www.internetsociety.org/sites/default/files/10_4_2.pdf