CVE Vulnerabilities

CVE-2023-46753

Published: Oct 26, 2023 | Modified: Apr 28, 2024
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
5.9 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.

Affected Software

Name Vendor Start Version End Version
Frrouting Frrouting * 9.0.1 (including)
Red Hat Enterprise Linux 8 RedHat frr-0:7.5.1-22.el8 *
Red Hat Enterprise Linux 9 RedHat frr-0:8.5.3-4.el9 *
Frr Ubuntu bionic *
Frr Ubuntu devel *
Frr Ubuntu esm-apps/focal *
Frr Ubuntu focal *
Frr Ubuntu jammy *
Frr Ubuntu lunar *
Frr Ubuntu mantic *
Frr Ubuntu noble *
Frr Ubuntu oracular *
Frr Ubuntu trusty *
Frr Ubuntu xenial *
Quagga Ubuntu bionic *
Quagga Ubuntu focal *
Quagga Ubuntu trusty *
Quagga Ubuntu xenial *

References