[Ryu-devel] CVE-2018-1000155: Denial of Service, Improper Authentication and, Authorization, and Covert Channel in the OpenFlow 1.0+ handshake

2018-05-17 Thread Kashyap Thimmaraju
Dear Ryu Developers, I hope that you are aware of the OpenFlow CVE that was recently made public [1]. Have there been any discussions on this? Do you plan to provide a fix or announce a security advisory on this matter? We believe it is important to spread the awareness to people using OpenFlow co

Re: [Ryu-devel] [PATCH] lldp: fixed SystemCapabilities TLV

2018-05-17 Thread Marcin Chron
This patch removes 'Subtype' byte from SystemCapabilities TLV. There was an inconsistency in offical IEEE document which was corrected in 802.1AB-2009/Cor 1-2013. Signed-off-by: Marcin Chron --- ryu/lib/packet/lldp.py | 15 ++- ryu/tests/unit/packet/test_lldp.py | 4 +--

Re: [Ryu-devel] CVE-2018-1000155: Denial of Service, Improper Authentication and, Authorization, and Covert Channel in the OpenFlow 1.0+ handshake

2018-05-17 Thread William Fisher
It sounds like a single compromised switch peer certificate can be used to impersonate other datapath_id's. From the advisory, it appears the controller-side fix is to verify the datapath_id received in the FeaturesReply against the peer cert before trusting it. Is it possible to use a naming co

Re: [Ryu-devel] Very Urgent for thesis

2018-05-17 Thread IWAMOTO Toshihiro
On Sun, 13 May 2018 20:36:34 +0900, Faisal amin wrote: > > HI Ryu Team, > > I need to provide QoS using ryu controller. I need to configure queue using > OVSDB protocol.I have used following code to provide QoS using OVSDB. But i > want to add matching criteria in this code. Could anyone please h

Re: [Ryu-devel] [PATCH] lldp: fixed SystemCapabilities TLV

2018-05-17 Thread IWAMOTO Toshihiro
On Fri, 18 May 2018 06:32:17 +0900, Marcin Chron wrote: > > > > This patch removes 'Subtype' byte from SystemCapabilities TLV. > There was an inconsistency in offical IEEE document which was corrected > in 802.1AB-2009/Cor 1-2013. > > Signed-off-by: Marcin Chron > --- > ryu/lib/packet/lldp.py