Denial Of Service (DoS)

2023-10-2707:53:52

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libfrr.so

denial of service

bgp message

software vulnerability

router crash

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

libfrr.so is vulnerable to Denial of Service (DoS). An insecure implementation of BGP message processing allows an attacker to cause a denial-of-service (DoS) condition by sending a specially crafted BGP UPDATE message to a vulnerable router which could consume a large amount of memory and cause the router to crash.