CVEvulnerability

CVE-2022-43681

6.5 MEDIUM Published 2023-05-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125

Description

An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.

Affected configurations

• frrouting frrouting (<= 8.4) • debian debian linux 10.0 • debian debian linux 11.0 • debian debian linux 12.0

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References