CVE:CVE-2020-18684
CNNVD:CNNVD-202109-1953
Floodlight是一个领先的开源 OpenFlow 控制器。
Floodlight 1.2版本存在输入验证错误漏洞，该漏洞源于软件通过优先级或端口号在StaticFlowEntryPusherResource.java的checkFlow中有一个整数溢出。
solution:Upgrade atlassian floodlight to a higher version than 1.2,and avoid the version (,1.2]