CVE-2023-38802

2023-08-2800:00:00

ubuntu.com

frrouting

pica8 picos

remote attacker

denial of service

bgp update

tunnel encapsulation

cve-2023-38802

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.003

Percentile

72.0%

JSON

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote
attacker to cause a denial of service via a crafted BGP update with a
corrupted attribute 23 (Tunnel Encapsulation).

Bugs

<https://github.com/FRRouting/frr/issues/14289>

Notes

Author	Note
sbeattie	VINCE #1159
eslerm	frr merged patch on 2023-08-29 bcb6b58d9 (“bgpd: Use treat-as-withdraw for tunnel encapsulation attribute”) quagga does not implement RFC 7606
mdeslaur	This was actually fixed in USN-6323-1, but was not listed because of a copy/paste error

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchfrr< 7.2.1-1ubuntu0.2+esm2UNKNOWN
ubuntu22.04noarchfrr< 8.1-1ubuntu1.5UNKNOWN
ubuntu23.04noarchfrr< 8.4.2-1ubuntu1.3UNKNOWN