CVE Vulnerabilities

CVE-2023-38407

Published: Nov 06, 2023 | Modified: Jul 03, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.

Affected Software

Name Vendor Start Version End Version
Frrouting Frrouting * 8.5 (excluding)
Red Hat Enterprise Linux 8 RedHat frr-0:7.5.1-13.el8_9.3 *
Red Hat Enterprise Linux 8.6 Extended Update Support RedHat frr-0:7.5-11.el8_6.7 *
Red Hat Enterprise Linux 8.8 Extended Update Support RedHat frr-0:7.5.1-7.el8_8.5 *
Red Hat Enterprise Linux 9 RedHat frr-0:8.3.1-11.el9_3.2 *
Red Hat Enterprise Linux 9.0 Extended Update Support RedHat frr-0:8.0-5.el9_0.3 *
Red Hat Enterprise Linux 9.2 Extended Update Support RedHat frr-0:8.3.1-5.el9_2.4 *
Frr Ubuntu bionic *
Frr Ubuntu devel *
Frr Ubuntu esm-apps/focal *
Frr Ubuntu focal *
Frr Ubuntu jammy *
Frr Ubuntu lunar *
Frr Ubuntu mantic *
Frr Ubuntu noble *
Frr Ubuntu oracular *
Frr Ubuntu trusty *
Frr Ubuntu xenial *
Quagga Ubuntu bionic *
Quagga Ubuntu trusty *
Quagga Ubuntu xenial *

References