Veracode Vulnerability DatabaseVERACODE:43193Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
18.3%
frr is vulnerable to Denial of Service (DoS). This vulnerability allows an attacker who can send malformed BGP requests to cause a denial-of-service (DoS) condition or potentially execute arbitrary code on the vulnerable device.
| CPE | Name | Operator | Version |
|---|---|---|---|
| frr:sid | eq | 7.4-1+b1 | |
| frr:sid | eq | 7.5.1-1.1 | |
| frr:sid | eq | 7.5.1-1 | |
| frr:buster | eq | 6.0.2-2+deb10u1 | |
| frr:sid | eq | 7.4-1+b1 | |
| frr:sid | eq | 7.5.1-1.1 | |
| frr:sid | eq | 7.5.1-1 | |
| frr:buster | eq | 6.0.2-2+deb10u1 |
References
github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8
lists.debian.org/debian-lts-announce/2023/09/msg00020.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
security-tracker.debian.org/tracker/CVE-2023-41909
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
18.3%