Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42765
HistoryAug 15, 2023 - 4:13 a.m.

Denial Of Service (DoS)

2023-08-1504:13:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
ryu
denial of service
vulnerability
cpu resources
infinite loop
queue length.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

37.1%

ryu is vulnerable to Denial of Service (DoS) attacks. The vulnerability occurs when Ryu parses a specially crafted OFPBundleCtrlMsg message with a queue length of zero, which results in an infinite loop, consuming excessive CPU resources and preventing other users from accessing the service.

CPENameOperatorVersion
ryule4.34
ryule4.34

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

37.1%

Related for VERACODE:42765