CVE-2024-28732 — HIGH (7.5)

Vulnerability Description

An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Facuet	Ryu	4.34

Related Weaknesses (CWE)

CWE-835

References

https://gist.github.com/ErodedElk/1133d64dde2d92393a065edc9b243792ExploitThird Party Advisory
https://github.com/faucetsdn/ryu/issues/188ExploitIssue TrackingVendor Advisory
https://gist.github.com/ErodedElk/1133d64dde2d92393a065edc9b243792ExploitThird Party Advisory
https://github.com/faucetsdn/ryu/issues/188ExploitIssue TrackingVendor Advisory

FAQ

What is CVE-2024-28732?

CVE-2024-28732 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).

How severe is CVE-2024-28732?

CVE-2024-28732 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-28732?

Check the references section above for vendor advisories and patch information. Affected products include: Facuet Ryu.