Lucene search

K
githubGitHub Advisory DatabaseGHSA-6RQV-5CG7-M4X3
HistoryApr 29, 2024 - 9:30 p.m.

Buffer Overflow vulnerability in osrg gobgp

2024-04-2921:30:34
CWE-120
GitHub Advisory Database
github.com
2
buffer overflow
osrg gobgp
denial of service
handlingerror function
software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go.

Affected configurations

Vulners
Node
osrggobgpRange3.20.0
VendorProductVersionCPE
osrggobgp*cpe:2.3:a:osrg:gobgp:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High