# ryu (PyPI) vulnerabilities

9 known vulnerabilities (6 high, 1 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/ryu/

## Advisories (9)

### [CVE-2024-34489](https://cve.now/CVE-2024-34489): OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via length=0.

- Severity: High 7.5
- Published: May 5, 2024
- Affected: through 4.34.

### [CVE-2024-34488](https://cve.now/CVE-2024-34488): OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via b.length=0.

- Severity: High 7.5
- Published: May 5, 2024
- Affected: through 4.34.

### [CVE-2024-34487](https://cve.now/CVE-2024-34487): OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via inst.length=0.

- Severity: High 7.5
- Published: May 5, 2024
- Affected: through 4.34.

### [CVE-2024-34486](https://cve.now/CVE-2024-34486): OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.

- Severity: High 7.5
- Published: May 5, 2024
- Affected: through 4.34.

### [CVE-2024-34484](https://cve.now/CVE-2024-34484): OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via action.len=0.

- Severity: Medium 5.3
- Published: May 5, 2024
- Affected: through 4.34.

### [CVE-2024-34483](https://cve.now/CVE-2024-34483): OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPBucket.len=0.

- Severity: High 7.5
- Published: May 5, 2024
- Affected: through 4.34.

### [CVE-2024-28732](https://cve.now/CVE-2024-28732): An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service…

- Severity: High 7.5
- Published: Apr 8, 2024
- Affected: through 4.34.

### [CVE-2020-35141](https://cve.now/CVE-2020-35141): An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial…

- Severity: Unrated
- Published: Aug 11, 2023
- Affected: through 4.34.

### [CVE-2020-35139](https://cve.now/CVE-2020-35139): An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of…

- Severity: Unrated
- Published: Aug 11, 2023
- Affected: through 4.34.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/ryu
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.