-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ryu | pip | <= 4.34 |
The GitHub issue #195 explicitly shows the vulnerable loop in OFPHello.parser() where length=0 input prevents offset advancement. The CWE-835 mapping confirms this is an infinite loop scenario. The code structure matches the described vulnerability mechanism, and the provided PoC demonstrates the exploit path through OFPHello message handling.