CVE-2024-44070

2024-08-1902:15:04

Debian Security Bug Tracker

security-tracker.debian.org

frrouting

vulnerability

bgp_attr_encap

bgpd

tlv value

security issue

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

17.7%

JSON

An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.

OSVersionArchitecturePackageVersionFilename
Debian12allfrr<= 8.4.4-1.1~deb12u1frr_8.4.4-1.1~deb12u1_all.deb
Debian11allfrr< 7.5.1-1.1+deb11u3frr_7.5.1-1.1+deb11u3_all.deb
Debian999allfrr< 10.1-0.2frr_10.1-0.2_all.deb
Debian13allfrr< 10.1-0.2frr_10.1-0.2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	frr	<= 8.4.4-1.1~deb12u1	frr_8.4.4-1.1~deb12u1_all.deb
Debian	11	all	frr	< 7.5.1-1.1+deb11u3	frr_7.5.1-1.1+deb11u3_all.deb
Debian	999	all	frr	< 10.1-0.2	frr_10.1-0.2_all.deb
Debian	13	all	frr	< 10.1-0.2	frr_10.1-0.2_all.deb