Non évaluée
An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option lengt...
CVE-2022-43681
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-43681 frr Corrigé dans: 7.5.1-1.1+deb11u2
Description d'origine La description telle que publiée par la source (souvent en anglais).
An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- web forescout.com
- web lists.debian.org