OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows malicious users to cause a denial of service (infinite loop) via OFPBucket.len=0.