Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1mZ3B3LWN4M3Ytd2o5Nc4AA7wX
Ryu Infinite Loop vulnerability
OFPPacketQueue
in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0
.
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mZ3B3LWN4M3Ytd2o5Nc4AA7wX
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 15 days ago
Updated: 13 days ago
Identifiers: GHSA-fgpw-cx3v-wj95, CVE-2024-34486
References:
- https://nvd.nist.gov/vuln/detail/CVE-2024-34486
- https://github.com/faucetsdn/ryu/issues/190
- https://github.com/advisories/GHSA-fgpw-cx3v-wj95
Blast Radius: 0.0
Affected Packages
pypi:ryu
Dependent packages: 5Dependent repositories: 154
Downloads: 9,712 last month
Affected Version Ranges: <= 4.34
No known fixed version
All affected versions: 3.20.1, 3.20.2, 3.23.1, 3.23.2, 3.25.1, 3.29.1, 4.2.1, 4.2.2, 4.8.1