Veracode Vulnerability DatabaseVERACODE:41437Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.005 Low
EPSS
Percentile
76.1%
libfrr.so is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the missing length checks in the bgp_attr_psid_sub function of bgp_attr.c, allowing an attacker to cause an application crash by providing a maliciously crafted input
References
github.com/FRRouting/frr/commit/06431bfa7570f169637ebb5898f0b0cc3b010802
github.com/FRRouting/frr/issues/13099
lists.debian.org/debian-lts-announce/2023/09/msg00020.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
security-tracker.debian.org/tracker/CVE-2023-31490
www.debian.org/security/2023/dsa-5495
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.005 Low
EPSS
Percentile
76.1%