CVE-2023-41359 — Out-of-bounds Read in Frrouting

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
9.1CRITICALNVD
EPSS
0.2%
top 59.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
FrroutingFedoraproject FedoraDebian FRR+3 more
Timeline
PublishedAug 29

Description

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages5 packages

▶debiandebian/frr

Also affects: Fedora 37, 38, 39

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-pwgp-j234-4fgq: An issue was discovered in FRRouting FRR through 9↗2023-08-29
▶

📋Vendor Advisories

3
Red Hat
frr: out of bounds read in bgp_attr_aigp_valid↗2023-08-29
▶
Microsoft
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP v↗2023-08-08
▶
Debian
CVE-2023-41359: frr - An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds ...↗2023
▶