Ryu Infinite Loop vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-34487 · ADVISORY
• faucetsdn/ryu · WEB
• faucetsdn/ryu · PACKAGE
• pypi.org/project/ryu · PACKAGE
• GitHub Advisory GHSA-m9vm-8mv9-v5v3 · ADVISORY

More vulnerabilities in ryu

• CVE-2024-34489HIGH 7.5OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via length=0.
• CVE-2024-34488HIGH 7.5OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via b.length=0.
• CVE-2024-34486HIGH 7.5OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.
• CVE-2024-34484MEDIUM 5.3OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via action.len=0.
• CVE-2024-34483HIGH 7.5OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPBucket.len=0.