149 matches found
Denial Of Service (DoS)
ryu is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of OFPGroupDescStats in ofprotov13parser.py, where setting the length of OFPBucket to 0 causes the offset and length to remain unchanged, leading to an infinite loop during parsing...
SUSE CVE-2024-34486
OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPQueueProp.len=0...
SUSE CVE-2024-34489
OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via length=0...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34486 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34486...
GHSA-FGPW-CX3V-WJ95 Ryu Infinite Loop vulnerability
OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPQueueProp.len=0...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34484 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34484...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34487 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34487...
GHSA-M9VM-8MV9-V5V3 Ryu Infinite Loop vulnerability
OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via inst.length=0...
GHSA-59P2-V62X-GXJ8 Ryu Infinite Loop vulnerability
OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via length=0...
GHSA-FFP9-PFQ9-G2WW Ryu Infinite Loop vulnerability
OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via b.length=0...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34489 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34489...
Ryu Infinite Loop vulnerability
OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via action.len=0...
Ryu Infinite Loop vulnerability
OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPBucket.len=0...
GHSA-7HMM-WG23-2W7M Ryu Infinite Loop vulnerability
OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPBucket.len=0...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34483 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34483...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34486 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34486...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34487 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34487...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34483 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34483...
cerberus-controller (>=0.1.3, <=0.1.8), csle-ryu (>=0.0.20, <=0.2.18) +14 more potentially affected by CVE-2024-34484 via ryu (4.34.0)
ryu PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ryu and may be impacted: - cerberus-controller =0.1.3, =0.0.20, =1.0.0, =10.0.5, =13.0.2, =0.1.3, =0.2.1 - ovs-helper 0.0.3 - rheaflow 0.0.1 and more Source cves: CVE-2024-34484...