description: OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired.
problem types: CWE-20
affected:
{
product: OpenDayLight
vendor: OpenDayLight
versions:
status: affected, version: Carbon SR3
}