CVE-2024-34489

The Faucet SDN Ryu software (version 4.34) is vulnerable to a Denial of Service (DoS) condition due to an infinite loop in the OFPHello message handling within the parser.py component. The root cause is triggered when an attacker provides a length=0 value. Exploitation details regarding specific ...

CVE-2024-34487

The Faucet SDN Ryu software (version 4.34) is vulnerable to a Denial of Service (DoS) condition. The root cause is inadequate input validation within the OFPFlowStats function located in parser.py. An attacker can trigger an infinite loop by setting the inst.length parameter to 0. No specific rem...

CVE-2024-34486

The Faucet SDN Ryu software (version 4.34 ) is vulnerable to a Denial of Service (DoS) condition due to inadequate input validation within the OFPPacketQueue function in parser.py. An attacker can trigger an infinite loop by setting the OFPQueueProp.len parameter to 0 . While the specific impact ...

CVE-2024-34484

The Faucet SDN Ryu framework version 4.34 is vulnerable to a denial of service (DoS) attack. The flaw exists within the OFPBucket component in parser.py, where an attacker can trigger an infinite loop by manipulating action.len=0. While the vulnerability is documented across multiple sources, inc...

CVE-2024-34488

The Faucet SDN Ryu software-defined networking framework (version 4.34 ) is vulnerable to a denial of service through an infinite loop . The flaw is located in the OFPMultipartReply function within parser.py, where an attacker can trigger the loop by manipulating b.length=0. While a proof of conc...

CVE-2024-34483

The Faucet SDN Ryu software (version 4.34) is vulnerable to a Denial of Service (DoS) attack. The root cause is the improper handling of OFPGroupDescStats within the parser.py file (specifically ofproto_v1_3_parser.py). When the length of OFPBucket is set to 0, the offset and length remain unchan...

CVE-2024-28732

The Faucet SDN Ryu networking framework (version 4.34 ) contains a vulnerability in the OFPMatch component within parser.py . This flaw allows remote attackers to trigger an infinite loop , resulting in a denial of service (DoS) . The root cause is characterized as a loop with an unreachable exit...