---
id: CVE-2024-34484
aliases:
  - GHSA-c7w6-33j3-j3mx
  - PYSEC-2026-1880
title: Ryu Infinite Loop vulnerability
summary: Ryu Infinite Loop vulnerability
severity: medium
vendor: ryu
product: ryu
ecosystem: pip
affected:
  - ryu <= 4.34
published: '2024-05-05'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-c7w6-33j3-j3mx'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-34484'
  - url: 'https://github.com/faucetsdn/ryu/issues/194'
  - url: 'https://github.com/faucetsdn/ryu'
tags:
  - osv
  - pip
epss: 0.00457
epssPercentile: 0.37034
ingestedAt: '2026-07-08T18:25:48.336Z'
---

## Overview

`OFPBucket` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `action.len=0`.

## Affected packages

- `ryu <= 4.34`

## Remediation

Refer to the advisory for the patched release.