CVE-2022-37032

Published: Sep 19, 2022Modified: Nov 21, 2024

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.

Affected (3)

Products: Frrouting: Frrouting · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Frrouting Frrouting	Before 8.4

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (10)

https://bugzilla.suse.com/show_bug.cgi?id=1202023

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/FRRouting/frr/commit/6d58272b4cf96f0daa846210dd2104877900f921

Source: cve@mitre.org

Patch

https://github.com/FRRouting/frr/commit/ff6db1027f8f36df657ff2e5ea167773752537ed

Source: cve@mitre.org

Patch

https://lists.debian.org/debian-lts-announce/2022/11/msg00039.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://www.debian.org/security/2023/dsa-5362

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1202023