Lucene search

K
redosRedosROS-20240904-01
HistorySep 04, 2024 - 12:00 a.m.

ROS-20240904-01

2024-09-0400:00:00
redos.red-soft.ru
5
vulnerability
frrouting
ospf daemon
dynamic capability handler
unix-like systems
buffer boundaries
denial of service
remote attacker

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

Vulnerability of the get_edge() function of the ospf_te.c file of the OSPF Daemonr component of the software tool for implementing network routing on Unix-like systems FRRouting is related to resource release errors.
network routing on Unix-like systems FRRouting is related to resource release errors.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

A vulnerability in a software tool for implementing network routing on Unix-like systems FRRouting
is related to incorrect validation of a specified input data type. Exploitation of the vulnerability could allow
a remote attacker to cause a denial of service

Vulnerability in the ospf_te_parse_ext_link() function of the Opaque LSA Extended Link Parser component of the programmatic
means of implementing network routing on Unix-like systems FRRouting is related to the operation exceeding the buffer boundaries in memory.
beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely,
cause a denial of service

Vulnerability in the ospf_te_parse_ri() function of the OSPF LSA Packet Handler component of the OSPF LSA Packet Handler software tool
implementation of network routing on Unix-like systems FRRouting is related to the operation exceeding the memory buffer boundaries.
buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely,
cause a denial of service

Vulnerability in the Dynamic Capability Handler component of the network routing software implementation tool
on Unix-like systems FRRouting is related to execution of a loop with an unreachable exit condition.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64frr< 10.1-1UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High