CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

CVE-2022-37032 : FRRouting (FRR) before 8.4 has an out-of-bounds read in the BGP daemon, specifically in bgp_capability_msg_parse (bgpd/bgp_packet.c), which may trigger a segmentation fault and DoS. Affected product: FRR’s BGP daemon; impact is denial of service due to memory access. Exploitation...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

FRRouting FRR 安全漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR, which can be exploited to cause a denial of service by an attacker who creates a memory leak in FRR via the IS-IS daemon...

PT-2022-7370 · Unknown +7 · Frrouting Frr +7

Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions prior to 8.4 Description: The issue is related to an out-of-bounds read in the BGP daemon of FRRouting FRR. This can lead to a segmentation fault and denial of service. The problem occurs in the bgp capability msg parse...

The vulnerability of the babel_packet_examin() function (babeld/message.c) in the software implementation of network routing on Unix-like systems allows a hacker to execute arbitrary code.

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the babel_packet_examin() function (babeld/message.c) in the software implementation of network routing on Unix-like systems allows a hacker to execute arbitrary code.

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerabilities of the functions `bgp_notify_send_with_data()` and `bgp_process_packet()` (from the file `bgp_packet.c`) of the FRRouting network routing implementation software on Unix-like systems allow a attacker to execute arbitrary code.

The vulnerabilities of the functions bgpnotifysendwithdata and bgpprocesspacket in the bgppacket.c file of the networking routing software for Unix-like systems in FRRouting are related to the use of memory after it is freed. Exploiting these vulnerabilities could allow a malicious actor, operati...

CVE-2022-37035

A flaw was found in bgpd in FRRouting FRR. There is a possible use-after-free issue due to a race condition in bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c. This issue can lead to remote code execution or information disclosure by sending crafted BGP packets...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

Race condition

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

UBUNTU-CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

FRR's bgpd contains a use-after-free condition in bgp_notify_send_with_data() and bgp_process_packet() (bgp_packet.c) due to a race, allowing possible Remote Code Execution or Information Disclosure via crafted BGP packets (no user interaction). Affected: FRRouting (FRR) v8.3 and earlier; ATT&CK ...

FRRouting FRR 竞争条件问题漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 8.3, which stems from a race condition in bgpnotifysendwithdata and bgpprocesspacket in its bgpd component, bgppacket.c, which could b...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

Fedora: Security Advisory for frr (FEDORA-2022-376cb924bd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: frr-8.2.2-2.fc36

FRRouting is free software that manages TCP/IP based routing protocols. It ta kes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EI GRP and BFD. FRRouting is a fork of Quagga...