Atlassian Floodlight Controller CVE-2015-6569 Denial of Service Vulnerability

Bugtraq ID:	103132
Class:	Race Condition Error
CVE:	CVE-2015-6569
Remote:	Yes
Local:	No
Published:	Feb 21 2018 12:00AM
Updated:	Feb 21 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Atlassian Floodlight Controller 1.1 Atlassian Floodlight Controller 1.0
Not Vulnerable:	Atlassian Floodlight Controller 1.2

Atlassian Floodlight Controller CVE-2015-6569 Denial of Service Vulnerability

Atlassian Floodlight Controller is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition.

Versions prior to Atlassian Floodlight Controller 1.2 are vulnerable.

Atlassian Floodlight Controller CVE-2015-6569 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Atlassian Floodlight Controller CVE-2015-6569 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Atlassian Floodlight Controller CVE-2015-6569 Denial of Service Vulnerability

References:

• fix data races in LoadBalancer module #563 (Github)
  
• Floodlight Controller Homepage (Atlassian)
  
• Floodlight v1.2 (Atlassian)