Lucene search

K
osvGoogleOSV:GHSA-FFP9-PFQ9-G2WW
HistoryMay 05, 2024 - 3:30 a.m.

Ryu Infinite Loop vulnerability

2024-05-0503:30:47
Google
osv.dev
4
ryu
infinite loop
vulnerability
ofpmultipartreply
parser
faucet sdn
denial of service
infinite loop
b.length=0
software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via b.length=0.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Related for OSV:GHSA-FFP9-PFQ9-G2WW