CVE-2022-43681
published 2023-05-03CVE-2022-43681: An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet…
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
2.11%
79.8th percentile
An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | frr | < frr 8.4.1-1 (bookworm) | frr 8.4.1-1 (bookworm) |
| frrouting | frrouting | <= 8.4 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-43681: An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8
osv·2023-05-03·CVSS 6.5
CVE-2022-43681 [MEDIUM] CVE-2022-43681: An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8
An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.
GHSA
GHSA-x7mf-v6gh-vm4g: An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8
ghsa_unreviewed·2023-05-03
CVE-2022-43681 [MEDIUM] CWE-125 GHSA-x7mf-v6gh-vm4g: An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8
An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.
Red Hat
frr: out-of-bounds read exists in the BGP daemon of FRRouting
vendor_redhat·2023-05-03·CVSS 6.5
CVE-2022-43681 [MEDIUM] CWE-125 frr: out-of-bounds read exists in the BGP daemon of FRRouting
frr: out-of-bounds read exists in the BGP daemon of FRRouting
An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.
An out-of-bounds read flaw exists in the BGP daemon of FRRouting. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads out of the bounds of the packet, throwing a SIGABRT signal and exiting. This issue results in a bgpd daemon
Debian
CVE-2022-43681: frr - An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. Whe...
vendor_debian·2022·CVSS 6.5
CVE-2022-43681 [MEDIUM] CVE-2022-43681: frr - An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. Whe...
An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.
Scope: local
bookworm: resolved (fixed in 8.4.1-1)
bullseye: resolved (fixed in 7.5.1-1.1+deb11u2)
forky: resolved (fixed in 8.4.1-1)
sid: resolved (fixed in 8.4.1-1)
trixie: resolved (fixed in 8.4.1-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-05-03
Published