Ryu Infinite Loop vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-34488 · ADVISORY
• faucetsdn/ryu · WEB
• faucetsdn/ryu · PACKAGE
• pypi.org/project/ryu · PACKAGE
• GitHub Advisory GHSA-ffp9-pfq9-g2ww · ADVISORY

ryu のその他の脆弱性

• CVE-2024-34489高 7.5OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via length=0.
• CVE-2024-34487高 7.5OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via inst.length=0.
• CVE-2024-34486高 7.5OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.
• CVE-2024-34484中 5.3OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via action.len=0.
• CVE-2024-34483高 7.5OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPBucket.len=0.