Lucene search
MitreCVE-2023-38283HistoryAug 29, 2023 - 4:15 p.m.
CVE-2023-38283
2023-08-2916:15:08
CWE-754
mitre
web.nvd.nist.gov
34
openbgpd
bgp
security vulnerability
cve-2023-38283
openbsd 7.3 errata 006
nvd
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
36.9%
In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant remote actor may cause the system to incorrectly reset a session. This is fixed in OpenBSD 7.3 errata 006.
Affected configurations
Node
openbgpdopenbgpdRange<8.1
openbsdopenbsdRange<7.3
ORopenbsdopenbsdMatch7.3-
ORopenbsdopenbsdMatch7.3errata_001
ORopenbsdopenbsdMatch7.3errata_002
ORopenbsdopenbsdMatch7.3errata_003
ORopenbsdopenbsdMatch7.3errata_004
ORopenbsdopenbsdMatch7.3errata_005
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openbgpd | openbgpd | * | cpe:2.3:a:openbgpd:openbgpd:*:*:*:*:*:*:*:* |
| openbsd | openbsd | * | cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:* |
| openbsd | openbsd | 7.3 | cpe:2.3:o:openbsd:openbsd:7.3:-:*:*:*:*:*:* |
| openbsd | openbsd | 7.3 | cpe:2.3:o:openbsd:openbsd:7.3:errata_001:*:*:*:*:*:* |
| openbsd | openbsd | 7.3 | cpe:2.3:o:openbsd:openbsd:7.3:errata_002:*:*:*:*:*:* |
| openbsd | openbsd | 7.3 | cpe:2.3:o:openbsd:openbsd:7.3:errata_003:*:*:*:*:*:* |
| openbsd | openbsd | 7.3 | cpe:2.3:o:openbsd:openbsd:7.3:errata_004:*:*:*:*:*:* |
| openbsd | openbsd | 7.3 | cpe:2.3:o:openbsd:openbsd:7.3:errata_005:*:*:*:*:*:* |
Related
osv
osv
CVE-2023-38283
2023-08-29 16:15:08
prion
prion
Design/Logic Flaw
2023-08-29 16:15:00
cvelist
cvelist
CVE-2023-38283
2023-08-29 00:00:00
ubuntucve
ubuntucve
CVE-2023-38283
2023-08-29 00:00:00
cnvd
cnvd
OpenBSD Code Issues Vulnerabilities
2023-08-31 00:00:00
nvd
nvd
CVE-2023-38283
2023-08-29 16:15:08
debiancve
debiancve
CVE-2023-38283
2023-08-29 16:15:08
cert
cert
thn
thn
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
36.9%
Related for CVE-2023-38283