~ / search / GHSA-fgpw-cx3v-wj95

GHSA-fgpw-cx3v-wj95

Ryu Infinite Loop vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-34486

Packages

EcosystemPackageAffectedFixed in
PyPI ryu <= 4.34 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

`OFPPacketQueue` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `OFPQueueProp.len=0`.

References

External links from the advisory. They lead to third-party sites.