Lucene search
+L

960 matches found

NVD
NVD
•added 2022/09/19 10:15 p.m.•30 views

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

9.1CVSS0.02197EPSS
SaveExploits1References5
OSV
OSV
•added 2022/09/19 10:15 p.m.•14 views

UBUNTU-CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

9.1CVSS7.2AI score0.02197EPSS
SaveExploits1References5
Prion
Prion
•added 2022/09/19 10:15 p.m.•21 views

Design/Logic Flaw

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

6.4CVSS8.7AI score0.02197EPSS
SaveExploits1References5Affected Software2
UbuntuCve
UbuntuCve
•added 2022/09/19 10:15 p.m.•35 views

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

9.1CVSS7.1AI score0.02197EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•0 views

CVE-2022-37032: Out-of-bounds Read

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

9.1CVSS7.6AI score0.02197EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/09/19 12:00 a.m.•43 views

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

9.1AI score0.02197EPSS
SaveExploits1References5
CVE
CVE
•added 2022/09/19 12:00 a.m.•156 views

CVE-2022-37032

CVE-2022-37032 : FRRouting (FRR) before 8.4 has an out-of-bounds read in the BGP daemon, specifically in bgp_capability_msg_parse (bgpd/bgp_packet.c), which may trigger a segmentation fault and DoS. Affected product: FRR’s BGP daemon; impact is denial of service due to memory access. Exploitation...

9.1CVSS8.7AI score0.02197EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2022/09/19 12:00 a.m.•42 views

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

9.1CVSS7.3AI score0.02197EPSS
SaveExploits1
OSV
OSV
•added 2022/09/19 12:00 a.m.•25 views

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

6.5AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2022/09/12 12:00 a.m.•16 views

PT-2022-7370 · Unknown +7 · Frrouting Frr +7

Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions prior to 8.4 Description: The issue is related to an out-of-bounds read in the BGP daemon of FRRouting FRR. This can lead to a segmentation fault and denial of service. The problem occurs in the bgp capability msg parse...

9.8CVSS6.7AI score0.742EPSS
SaveExploits8References146
CNNVD
CNNVD
•added 2022/09/12 12:00 a.m.•13 views

FRRouting FRR 安全漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR, which can be exploited to cause a denial of service by an attacker who creates a memory leak in FRR via the IS-IS daemon...

8.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/08/24 12:00 a.m.•14 views

The vulnerability of the babel_packet_examin() function (babeld/message.c) in the software implementation of network routing on Unix-like systems allows a hacker to execute arbitrary code.

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01014EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/24 12:00 a.m.•14 views

The vulnerability of the babel_packet_examin() function (babeld/message.c) in the software implementation of network routing on Unix-like systems allows a hacker to execute arbitrary code.

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.00981EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/18 12:00 a.m.•12 views

The vulnerabilities of the functions `bgp_notify_send_with_data()` and `bgp_process_packet()` (from the file `bgp_packet.c`) of the FRRouting network routing implementation software on Unix-like systems allow a attacker to execute arbitrary code.

The vulnerabilities of the functions bgpnotifysendwithdata and bgpprocesspacket in the bgppacket.c file of the networking routing software for Unix-like systems in FRRouting are related to the use of memory after it is freed. Exploiting these vulnerabilities could allow a malicious actor, operati...

4.3CVSS8AI score0.02573EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
•added 2022/08/16 9:38 a.m.•112 views

CVE-2022-37035

A flaw was found in bgpd in FRRouting FRR. There is a possible use-after-free issue due to a race condition in bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c. This issue can lead to remote code execution or information disclosure by sending crafted BGP packets...

8.1CVSS2.2AI score0.02573EPSS
SaveExploits1References3
NVD
NVD
•added 2022/08/02 11:15 p.m.•24 views

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

8.1CVSS0.02573EPSS
SaveExploits1References4
Prion
Prion
•added 2022/08/02 11:15 p.m.•28 views

Race condition

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

5.1CVSS7.9AI score0.02573EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/08/02 11:15 p.m.•13 views

UBUNTU-CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

8.1CVSS7.4AI score0.02573EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/08/02 11:15 p.m.•59 views

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

8.1CVSS7.2AI score0.02573EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/02 12:00 a.m.•4 views

CVE-2022-37035: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

8.1CVSS6.8AI score0.02573EPSS
SaveExploits1References2
Rows per page
Query Builder