CVE-2023-3748

EPSS 0.02%
Published 24.07.2023 16:15:13
Last modified 21.11.2024 08:17:58
Source secalert@redhat.com
Teams watchlist Login
Open Login

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Frrouting ≫ Frrouting Version < 8.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.038

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
secalert@redhat.com	3.5	2.1	1.4	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://access.redhat.com/security/cve/CVE-2023-3748

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2223668

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2023-3748

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-3748

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-3748

EUVD