Ubuntu 22.04 LTS : FRR vulnerabilities (USN-5685-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5685-1 advisory. It was discovered that FRR incorrectly handled parsing certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash,...

Juniper Networks Junos OS和Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos...

Use-After-Free

frr is vulnerable to use-after-free. The vulnerability exists in multiple functions of bgppacket.c due to a race condition. which could allow an attacker to execute arbitrary codes and access the sensitive information by sending malicious BGP packets...

PT-2022-5242 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.3 through 21.3R3-S2 Juniper Networks Junos OS versions 21.4 through 21.4R2-S2, 21.4R3 Juniper Networks Junos OS versions 22.1 through 22.1R1-S2, 22.1R3 Juniper Networks Junos OS versions 22.2 through 22.2...

Juniper Junos OS Vulnerability (JSA69875)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69875 advisory. - A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an...

U.S. Adds 2 More Chinese Telecom Firms to National Security Threat List

The U.S. Federal Communications Commission FCC has added Pacific Network Corp, along with its subsidiary ComNet USA LLC, and China Unicom Americas Operations Limited, to the list of communications equipment and services that have been deemed a threat to national security. The agency said the...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

UBUNTU-CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

Design/Logic Flaw

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

CVE-2022-37032 : FRRouting (FRR) before 8.4 has an out-of-bounds read in the BGP daemon, specifically in bgp_capability_msg_parse (bgpd/bgp_packet.c), which may trigger a segmentation fault and DoS. Affected product: FRR’s BGP daemon; impact is denial of service due to memory access. Exploitation...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

PT-2022-7370 · Unknown +7 · Frrouting Frr +7

Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions prior to 8.4 Description: The issue is related to an out-of-bounds read in the BGP daemon of FRRouting FRR. This can lead to a segmentation fault and denial of service. The problem occurs in the bgp capability msg parse...

Juniper Junos OS Vulnerability (JSA69717)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69717 advisory. - A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated...

The vulnerabilities of the functions `bgp_notify_send_with_data()` and `bgp_process_packet()` (from the file `bgp_packet.c`) of the FRRouting network routing implementation software on Unix-like systems allow a attacker to execute arbitrary code.

The vulnerabilities of the functions bgpnotifysendwithdata and bgpprocesspacket in the bgppacket.c file of the networking routing software for Unix-like systems in FRRouting are related to the use of memory after it is freed. Exploiting these vulnerabilities could allow a malicious actor, operati...

CVE-2022-37035

A flaw was found in bgpd in FRRouting FRR. There is a possible use-after-free issue due to a race condition in bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c. This issue can lead to remote code execution or information disclosure by sending crafted BGP packets...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...