Out-of-bounds Reads

🗓️ 31 Aug 2023 04:24:49Reported by Veracode Vulnerability DatabaseType

libfrr.so vulnerable to Out-of-bounds Reads in bgp_route_refresh_receive function at bgp_packet.

Reporter	Title	Published	Views	Family All 89
ATTACKERKB	CVE-2023-41360	29 Aug 202304:15	–	attackerkb
AlmaLinux	Moderate: frr security update	30 Apr 202400:00	–	almalinux
BDU FSTEC	The vulnerability of the bgpd/bgp_packet.c file in the networking routing implementation software for Unix-like systems, related to out-of-memory reading, allows attackers to disclose protected information or cause service failures.	18 Jun 202400:00	–	bdu_fstec
CBLMariner	CVE-2023-41360 affecting package frr for versions less than 8.5.3-2	27 Sep 202318:02	–	cbl_mariner
Circl	CVE-2023-41360	29 Aug 202307:17	–	circl
CloudLinux	quagga: Fix of 2 CVEs	20 Oct 202315:53	–	cloudlinux
CNNVD	FRRouting FRR 缓冲区错误漏洞	29 Aug 202300:00	–	cnnvd
CVE	CVE-2023-41360	29 Aug 202300:00	–	cve
Cvelist	CVE-2023-41360	29 Aug 202300:00	–	cvelist
Debian	[SECURITY] [DLA 3573-1] frr security update	19 Sep 202319:41	–	debian

Vulners

Node

frr frrMatch7.4-1+b1debian

AND

frr frrMatch7.5.1-1.1debian

AND

frr frrMatch7.5.1-1debian

AND

frr frrMatch6.0.2-2+deb10u1debian

AND

libfrr.so libfrr.soRange0.0.0.debug–0.0.0cpp

Source	Link
github	www.github.com/FRRouting/frr/pull/14245
github	www.github.com/FRRouting/frr/commit/9b855a692e68e0d16467e190b466b4ecb6853702
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00020.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
github	www.github.com/advisories/GHSA-8x46-qpq3-2pgp

22 Dec 2023 23:27Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.1

EPSS0.0096

SSVC