Lucene search

Veracode Vulnerability DatabaseVERACODE:46621

HistoryApr 25, 2024 - 7:50 a.m.

Buffer Overflow

2024-04-2507:50:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libfrr.so

buffer overflow

ospf lsa

parsing

denial of service

software

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

libfrr.so is vulnerable to Buffer Overflow. The vulnerability is due to inadequate validation of lengths in Segment Routing Adjacency SID subTLVs within OSPF LSA packets during the parsing process, which could result in a Denial of Service.

CPENameOperatorVersion
libfrr.sole0.0.0
libfrr.sole0.0.0

CPE	Name	Operator	Version
	libfrr.so	le	0.0.0
	libfrr.so	le	0.0.0

References

bugzilla.suse.com/show_bug.cgi?id=1222528

github.com/FRRouting/frr/commit/4fb7d7885d538973ed05a6ecae5ad6eaf5017d82