---
id: CVE-2024-34487
aliases:
  - GHSA-m9vm-8mv9-v5v3
  - PYSEC-2026-1883
title: Ryu Infinite Loop vulnerability
summary: Ryu Infinite Loop vulnerability
severity: medium
vendor: ryu
product: ryu
ecosystem: pip
affected:
  - ryu <= 4.34
published: '2024-05-05'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-m9vm-8mv9-v5v3'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-34487'
  - url: 'https://github.com/faucetsdn/ryu/issues/192'
  - url: 'https://github.com/faucetsdn/ryu'
tags:
  - osv
  - pip
epss: 0.00681
epssPercentile: 0.50305
ingestedAt: '2026-07-08T18:25:51.200Z'
---

## Overview

`OFPFlowStats` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `inst.length=0`.

## Affected packages

- `ryu <= 4.34`

## Remediation

Refer to the advisory for the patched release.