CVE-2024-28732

Published Apr 8, 2024 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-p28x-hj68-7vfp Ryu Infinite Loop vulnerability
History
Type Values Removed Values Added
First Time appeared Faucet-sdn
Faucet-sdn ryu
CPEs cpe:2.3:a:faucet-sdn:ryu:4.34:*:*:*:*:*:*:*
Vendors & Products Faucet-sdn
Faucet-sdn ryu
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Facuet
Facuet ryu
CPEs cpe:2.3:a:facuet:ryu:4.34:*:*:*:*:*:*:*
Vendors & Products Facuet
Facuet ryu
Type Values Removed Values Added
Weaknesses CWE-835
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 21, 2024, 8:36 PM
Reserved
Mar 8, 2024, 12:00 AM
Status
Analyzed
Published
Apr 8, 2024, 2:15 PM
Modified
Jun 17, 2026, 7:21 AM