CVE-2023-0026

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When a BGP update message is received over an established BGP session, and that messa...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to gain access to protected information

The vulnerability of the Linux operating system’s kernel is related to errors in cross-border deletion of critical data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the software for the Border Gateway Protocol (BGP) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems, which allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol Software BGP in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability allows a malicious actor to send specially crafted BGP packets, thereby causing...

The vulnerability of the BGP routing protocol on Juniper Networks’ Junos OS and Junos OS Evolved systems allows a attacker to cause a service failure.

The vulnerability of the BGP routing protocol in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the routing protocol BGP implementation in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved systems allows a attacker to cause service interruptions.

The vulnerability of the Border Gateway Protocol BGP implementation in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotel...

The vulnerability of the bgpd software module for implementing network routing on Unix-like systems allows a hacker to cause service interruptions.

The vulnerability of the bgpd software module for implementing routing on Unix-like systems is related to the issue where an operation is executed outside the buffer in memory when processing BGP OPEN messages with a length of one octet or word. Exploiting this vulnerability allows a remote...

The vulnerability of the `bgp_openOptionParse()` function in the bgpd daemon, a software component for implementing routing on Unix-like systems, allows a attacker to cause a service failure.

The vulnerability of the bgpopenOptionParse function in the bgpd daemon, a software component for implementing routing protocols on Unix-like systems, is related to the issue of the operation going beyond the buffer during the processing of BGP OPEN messages with a value of 0xff. Exploiting this...

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.

...

SUSE CVE-2023-31489

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgpcapabilityllgr function...

frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service

A vulnerability was found in FRRouting. This issue occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c. An out-of-bounds read in the BGP daemon may lead to a segmentation fault and a denial of service...

PT-2023-23361 · Frrouting +5 · Frrouting Bgpd +5

Name of the Vulnerable Software and Affected Versions: Frrouting bgpd version 8.4.2 Description: An issue in Frrouting bgpd allows a remote attacker to cause a denial of service via the bgp capability llgr function. Recommendations: For version 8.4.2, consider disabling the bgp capability llgr...

SUSE CVE-2022-40302

An issue was discovered in bgpd in FRRouting FRR through 8.4. By crafting a BGP OPEN message with an option of type 0xff Extended Length from RFC 9072, attackers may cause a denial of service assertion failure and daemon restart, or out-of-bounds read. This is possible because of inconsistent...

SUSE CVE-2022-43681

An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet or the option length word, in case of an extended OPEN message, the FRR code reads of out of the bounds of the packet, throwing a SIGABRT...

The vulnerability of the BGP OPEN Message Handler component of the networking routing implementation software on Unix-like systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely.

The vulnerability of the BGP OPEN Message Handler component of the networking routing implementation software on Unix-like systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2022-43681

An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet or the option length word, in case of an extended OPEN message, the FRR code reads of out of the bounds of the packet, throwing a SIGABRT...

DEBIAN-CVE-2022-40302

An issue was discovered in bgpd in FRRouting FRR through 8.4. By crafting a BGP OPEN message with an option of type 0xff Extended Length from RFC 9072, attackers may cause a denial of service assertion failure and daemon restart, or out-of-bounds read. This is possible because of inconsistent...

DEBIAN-CVE-2022-40318

An issue was discovered in bgpd in FRRouting FRR through 8.4. By crafting a BGP OPEN message with an option of type 0xff Extended Length from RFC 9072, attackers may cause a denial of service assertion failure and daemon restart, or out-of-bounds read. This is possible because of inconsistent...

UBUNTU-CVE-2022-40318

An issue was discovered in bgpd in FRRouting FRR through 8.4. By crafting a BGP OPEN message with an option of type 0xff Extended Length from RFC 9072, attackers may cause a denial of service assertion failure and daemon restart, or out-of-bounds read. This is possible because of inconsistent...

UBUNTU-CVE-2022-40302

An issue was discovered in bgpd in FRRouting FRR through 8.4. By crafting a BGP OPEN message with an option of type 0xff Extended Length from RFC 9072, attackers may cause a denial of service assertion failure and daemon restart, or out-of-bounds read. This is possible because of inconsistent...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 8.4 and earlier versions, which originates from an out-of-bounds read by the BGP daemon...