Lucene search
Ubuntu.comUB:CVE-2022-37032HistorySep 19, 2022 - 12:00 a.m.
CVE-2022-37032
2022-09-1900:00:00
ubuntu.com
ubuntu.com
15
bgp daemon
frrouting frr
segmentation fault
denial of service
bgp protocol
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
8.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.4%
An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may
lead to a segmentation fault and denial of service. This occurs in
bgp_capability_msg_parse in bgpd/bgp_packet.c.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | code is similar in quagga, probably vulnerable the frr patch for this issue is incompatible with quagga, as is requires the size of the struct to be changed: https://github.com/FRRouting/frr/commit/a46a2e9b4e8de782ac07e01429a80ed7ec167dcb changing the size of that struct causes s390x to fail tests. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | frr | < 7.2.1-1ubuntu0.2+esm2 | UNKNOWN |
| ubuntu | 22.04 | noarch | frr | < 8.1-1ubuntu1.2 | UNKNOWN |
| ubuntu | 22.10 | noarch | frr | < 8.1-1ubuntu3 | UNKNOWN |
| ubuntu | 23.04 | noarch | frr | < 8.1-1ubuntu3 | UNKNOWN |
| ubuntu | 23.10 | noarch | frr | < 8.1-1ubuntu3 | UNKNOWN |
| ubuntu | 24.04 | noarch | frr | < 8.1-1ubuntu3 | UNKNOWN |
| ubuntu | 18.04 | noarch | quagga | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | quagga | < 1.2.4-4ubuntu0.4 | UNKNOWN |
| ubuntu | 16.04 | noarch | quagga | < any | UNKNOWN |
Related
osv
osv
frr - security update
2023-02-24 00:00:00
Moderate: frr security and bug fix update
2023-05-16 00:00:00
CVE-2022-37032
2022-09-19 22:15:11
nessus
nessus
RHEL 9 : frr (RHSA-2023:2202)
2023-05-12 00:00:00
Oracle Linux 8 : frr (ELSA-2023-2801)
2023-05-24 00:00:00
Debian DSA-5362-1 : frr - security update
2023-02-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-10-12 10:37:48
debian
debian
[SECURITY] [DSA 5362-1] frr security update
2023-02-24 12:47:58
[SECURITY] [DLA 3211-1] frr security update
2022-11-28 18:00:29
almalinux
almalinux
Moderate: frr security, bug fix, and enhancement update
2023-05-09 00:00:00
Moderate: frr security and bug fix update
2023-05-16 00:00:00
cve
cve
CVE-2022-37032
2022-09-19 22:15:11
redhatcve
redhatcve
CVE-2022-37032
2022-09-21 13:19:14
nvd
nvd
CVE-2022-37032
2022-09-19 22:15:11
redhat
redhat
(RHSA-2023:2202) Moderate: frr security, bug fix, and enhancement update
2023-05-09 05:03:17
(RHSA-2023:2801) Moderate: frr security and bug fix update
2023-05-16 05:55:03
debiancve
debiancve
CVE-2022-37032
2022-09-19 22:15:11
oraclelinux
oraclelinux
frr security, bug fix, and enhancement update
2023-05-15 00:00:00
frr security and bug fix update
2023-05-24 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3211-1)
2022-11-29 00:00:00
Debian: Security Advisory (DSA-5362-1)
2023-02-28 00:00:00
Ubuntu: Security Advisory (USN-6482-1)
2023-11-16 00:00:00
prion
prion
Design/Logic Flaw
2022-09-19 22:15:00
cvelist
cvelist
CVE-2022-37032
2022-09-19 00:00:00
ubuntu
ubuntu
Quagga vulnerabilities
2023-11-15 00:00:00
FRR vulnerabilities
2022-10-18 00:00:00
FRR vulnerabilities
2024-06-05 00:00:00
redos
redos
ROS-20240607-01
2024-06-07 00:00:00
suse
suse
Security update for frr (important)
2022-09-12 00:00:00
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
8.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.4%
Related for UB:CVE-2022-37032