CVE-2022-37035

2022-08-0200:00:00

ubuntu.com

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In
bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there
is a possible use-after-free due to a race condition. This could lead to
Remote Code Execution or Information Disclosure by sending crafted BGP
packets. User interaction is not needed for exploitation.

Bugs

<https://github.com/FRRouting/frr/issues/11698>

Notes

Author	Note
mdeslaur	code doesn’t appear to be present in quagga

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchfrr< 7.2.1-1ubuntu0.2+esm2UNKNOWN
ubuntu22.04noarchfrr< 8.1-1ubuntu1.2UNKNOWN
ubuntu22.10noarchfrr< 8.1-1ubuntu3UNKNOWN
ubuntu23.04noarchfrr< 8.1-1ubuntu3UNKNOWN
ubuntu23.10noarchfrr< 8.1-1ubuntu3UNKNOWN
ubuntu24.04noarchfrr< 8.1-1ubuntu3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	frr	< 7.2.1-1ubuntu0.2+esm2	UNKNOWN
ubuntu	22.04	noarch	frr	< 8.1-1ubuntu1.2	UNKNOWN
ubuntu	22.10	noarch	frr	< 8.1-1ubuntu3	UNKNOWN
ubuntu	23.04	noarch	frr	< 8.1-1ubuntu3	UNKNOWN
ubuntu	23.10	noarch	frr	< 8.1-1ubuntu3	UNKNOWN
ubuntu	24.04	noarch	frr	< 8.1-1ubuntu3	UNKNOWN