CVE-2023-41627

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

Code injection

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

CVE-2023-4481

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

Input validation

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

PT-2023-28007 · O Ran Software Community · Ric-Plt-Lib-Rmr

Name of the Vulnerable Software and Affected Versions: O-RAN Software Community ric-plt-lib-rmr version 4.9.0 Description: The issue is related to the lack of validation of the source of routing tables received by the device, potentially allowing attackers to send forged routing tables. This coul...

CVE-2023-41627

The CVE-2023-41627 issue affects O-RAN Software Community ric-plt-lib-rmr v4.9.0, where routing-table sources are not validated, enabling forged routing tables to be sent to a device. Multiple sources (Red Hat, NVD/CVE records, CNNVD, PRION, and PT-Security) corroborate this description. Impact i...

ric-plt-lib-rmr security vulnerability

ric-plt-lib-rmr is an open source message router library from O-RAN Software Community. Applications can use it to send messages to other RMR-based applications. A security vulnerability exists in ric-plt-lib-rmr version v4.9.0, which originates from not verifying the source of a received routing...

CVE-2023-41627

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

CVE-2023-4481

CVE-2023-4481 describes an improper input validation in Juniper’s Routing Protocol Daemon (rpd) for Junos OS and Junos OS Evolved. A remote, unauthenticated attacker can cause a DoS by sending crafted BGP UPDATE messages over an existing BGP session; the impact can be sustained as updates are pro...

USN-6323-1 frr vulnerability

Ben Cartwright-Cox discovered that FRR did not handle RFC 7606 attributes properly. A remote attacker could possibly use this to cause denial of service...

SUSE CVE-2023-41358

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c processes NLRIs if the attribute length is zero...

Juniper Networks Junos OS和Junos OS Evolved 输入验证错误漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos...

AZL-28616 CVE-2023-41358 affecting package frr for versions less than 8.5.3-2

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c processes NLRIs if the attribute length is zero...

PT-2023-4678 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S10 Junos OS versions 21.1R1 through 21. Junos OS versions 21.2 through 21.2R3-S5 Junos OS versions 21.3 through 21.3R3-S5 Junos OS versions 21.4 through 21.4R3-S7 Junos OS versions 22.1 through 22.1R3-S4 Jun...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 9.0 and prior versions, which stems from a failure to check the availability of two bytes during AIGP validation...

The vulnerability of the IS-IS routing protocol implementation in the Cisco NX-OS operating system allows a hacker to perform a reboot of the device. This vulnerability is present in Cisco Nexus series 3000 and 9000 switches.

The vulnerability of the IS-IS routing protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 and 9000 switches is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to perform a reboot of the device by sending specially...

PT-2023-9202 · Unknown +4 · Frrouting Frr +4

Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions through 9.0 Description: An issue was discovered in FRRouting FRR, where there is an out-of-bounds read in bgp attr aigp valid in bgpd/bgp attr.c because there is no check for the availability of two bytes during AIGP...

UBUNTU-CVE-2023-38802

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...

Cisco Nexus 3000 9000 Series Switches IS-IS Protocol DoS (cisco-sa-nxos-n3_9k-isis-dos-FTCXB4Vb)

A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to...