GitHub Advisoryadvisory · PyPI

GHSA-4987-5p3p-9r27 FaucetSDN Ryu Denial of Service Vulnerability

HIGH Published 2023-08-11 Modified 2023-08-18 Official page ↗
Aliases
CVE-2020-35139
Ecosystem
PyPI
Packages
ryu
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770, CWE-835
Reviewed
2023-08-11

Affected packages

• PyPI ryu: <= 4.34 (no fix yet)

Description

An issue was discovered in `OFPBundleCtrlMsg` in `parser.py` in FaucetSDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).

Related

Alias · CVE (1)

  • CVE-2020-35139 An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of… vulnerability

Weakness · CWE (2)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness
  • CWE-835 Loop with Unreachable Exit Condition weakness

References