Lucene search
PRIOn knowledge basePRION:CVE-2022-40302HistoryMay 03, 2023 - 12:16 p.m.
Out-of-bounds
2023-05-0312:16:00
PRIOn knowledge base
www.prio-n.com
6
bgpd
frrouting
bgp
denial of service
rfc 9072
out-of-bounds read
assertion failure
An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| debian_linux | eq | 12.0 | |
| frrouting | le | 8.4 |
Related
osv
osv
CVE-2022-40302
2023-05-03 12:16:27
CVE-2022-40318
2023-05-03 12:16:27
Moderate: frr security and bug fix update
2023-11-07 00:00:00
redhatcve
redhatcve
CVE-2022-40302
2023-05-08 04:21:19
CVE-2022-40318
2023-05-08 04:21:25
veracode
veracode
Denial Of Service (DoS)
2023-07-23 07:23:28
Denial Of Service
2023-10-12 15:27:14
cve
cve
CVE-2022-40302
2023-05-03 12:16:27
CVE-2022-40318
2023-05-03 12:16:27
cvelist
cvelist
CVE-2022-40302
2023-05-03 00:00:00
CVE-2022-40318
2023-05-03 00:00:00
nvd
nvd
CVE-2022-40302
2023-05-03 12:16:27
CVE-2022-40318
2023-05-03 12:16:27
debiancve
debiancve
CVE-2022-40302
2023-05-03 12:16:27
CVE-2022-40318
2023-05-03 12:16:27
prion
prion
Out-of-bounds
2023-05-03 12:16:00
ubuntucve
ubuntucve
thn
thn
almalinux
almalinux
Moderate: frr security and bug fix update
2023-11-07 00:00:00
oraclelinux
oraclelinux
frr security and bug fix update
2023-11-11 00:00:00
nessus
nessus
Oracle Linux 9 : frr (ELSA-2023-6434)
2023-11-16 00:00:00
RHEL 9 : frr (RHSA-2023:6434)
2023-11-07 00:00:00
Debian DSA-5495-1 : frr - security update
2023-09-11 00:00:00
redhat
redhat
(RHSA-2023:6434) Moderate: frr security and bug fix update
2023-11-07 06:05:29
debian
debian
[SECURITY] [DSA 5495-1] frr security update
2023-09-11 07:14:35
[SECURITY] [DLA 3573-1] frr security update
2023-09-19 19:41:22
redos
redos
ROS-20240403-09
2024-04-03 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3573-1)
2023-09-20 00:00:00