hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka “topology spoofing.”