Ryu Infinite Loop vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-34486 · ADVISORY
• faucetsdn/ryu · WEB
• faucetsdn/ryu · PACKAGE
• pypi.org/project/ryu · PACKAGE
• GitHub Advisory GHSA-fgpw-cx3v-wj95 · ADVISORY

ryu のその他の脆弱性

• CVE-2024-34489高 7.5OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via length=0.
• CVE-2024-34488高 7.5OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via b.length=0.
• CVE-2024-34487高 7.5OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via inst.length=0.
• CVE-2024-34484中 5.3OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via action.len=0.
• CVE-2024-34483高 7.5OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPBucket.len=0.