Denial Of Service (DoS)

2024-05-0710:57:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

ryu software

input validation

ofpmultipartreply

parser.py

infinite loop

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

ryu is vulnerable to Denial Of Service (DoS). The vulnerability is due to inadequate input validation within the OFPMultipartReply function in parser.py, allowing an attacker to trigger an infinite loop by setting the length parameter to 0.

CPENameOperatorVersion
ryule4.34
ryule4.34

CPE	Name	Operator	Version
	ryu	le	4.34
	ryu	le	4.34

References

github.com/advisories/GHSA-ffp9-pfq9-g2ww

github.com/faucetsdn/ryu/issues/191