Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46545
HistoryApr 19, 2024 - 9:09 a.m.

Denial Of Service (DoS)

2024-04-1909:09:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
libfrr.so
denial of service
vulnerability
mp/gr capability
infinite loop
dynamic capability

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

libfrr.so is vulnerable to Denial of Service (DoS). The vulnerability is caused when receiving a MP/GR capability as a dynamic capability due to an incorrect placement of a continue statement within a while loop that iterates over a pointer. In this case, the pointer is not incremented before the continue statement is encountered, leading to an infinite loop condition.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%