GitHub Advisoryadvisory · PyPI

GHSA-m9vm-8mv9-v5v3 Ryu Infinite Loop vulnerability

MEDIUM Published 2024-05-05 Modified 2024-05-06 Official page ↗
Aliases
CVE-2024-34487
Ecosystem
PyPI
Packages
ryu
Severity
Moderate
Reviewed
2024-05-06

Affected packages

• PyPI ryu: <= 4.34 (no fix yet)

Description

`OFPFlowStats` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `inst.length=0`.

Related

Alias · CVE (1)

  • CVE-2024-34487 OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via inst.length=0. vulnerability

References