Frrouting

Frrouting

36 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-47235

  • EPSS 0.09%
  • Published 03.11.2023 21:15:17
  • Last modified 21.11.2024 08:30:00

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.

7.5

CVE-2023-47234

  • EPSS 0.13%
  • Published 03.11.2023 21:15:17
  • Last modified 21.11.2024 08:30:00

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).

5.9

CVE-2023-46753

  • EPSS 0.09%
  • Published 26.10.2023 05:15:26
  • Last modified 21.11.2024 08:29:13

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.

5.9

CVE-2023-46752

  • EPSS 0.1%
  • Published 26.10.2023 05:15:26
  • Last modified 21.11.2024 08:29:13

An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.

7.5

CVE-2023-41909

  • EPSS 0.08%
  • Published 05.09.2023 07:15:14
  • Last modified 21.11.2024 08:21:53

An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference.

7.5

CVE-2023-38802

Exploit
  • EPSS 0.77%
  • Published 29.08.2023 16:15:09
  • Last modified 21.11.2024 08:14:13

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

9.8

CVE-2023-41361

  • EPSS 0.5%
  • Published 29.08.2023 04:15:17
  • Last modified 21.11.2024 08:21:09

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

9.1

CVE-2023-41360

  • EPSS 0.24%
  • Published 29.08.2023 04:15:16
  • Last modified 21.11.2024 08:21:09

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.

9.1

CVE-2023-41359

  • EPSS 0.25%
  • Published 29.08.2023 04:15:16
  • Last modified 21.11.2024 08:21:08

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.

7.5

CVE-2023-41358

  • EPSS 0.35%
  • Published 29.08.2023 04:15:16
  • Last modified 21.11.2024 08:21:08

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.