Frrouting

frrouting

Vendor: Frrouting • 48 CVEs

CVEs (48)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-38407 1Frrouting 1Frrouting Jun 17, 2026 Nov 6, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.
CVE-2023-38406 1Frrouting 1Frrouting Jun 17, 2026 Nov 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
CVE-2023-47235 1Frrouting 1Frrouting Jun 17, 2026 Nov 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.
CVE-2023-47234 1Frrouting 1Frrouting Jun 17, 2026 Nov 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).
CVE-2023-46753 1Frrouting 1Frrouting Jun 17, 2026 Oct 26, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.
CVE-2023-46752 1Frrouting 1Frrouting Jun 17, 2026 Oct 26, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.
CVE-2023-41909 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 Sep 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference.
CVE-2023-38802 4Debian FedoraprojectFrrouting+1 more 4Debian Linux FedoraFrrouting+1 more Jun 17, 2026 Aug 29, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
CVE-2023-41361 2Debian Frrouting 2Debian Linux Frrouting Jun 17, 2026 Aug 29, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.
CVE-2023-41360 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 Aug 29, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.
CVE-2023-41359 2Fedoraproject Frrouting 2Fedora Frrouting Jun 17, 2026 Aug 29, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
CVE-2023-41358 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 Aug 29, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.
CVE-2023-3748 1Frrouting 1Frrouting Jun 17, 2026 Jul 24, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the i...Show more A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.Show less
CVE-2023-31490 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.
CVE-2023-31489 2Fedoraproject Frrouting 2Fedora Frrouting Jun 17, 2026 May 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
CVE-2022-43681 2Debian Frrouting 2Debian Linux Frrouting Jun 17, 2026 May 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN messag...Show more An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.Show less
CVE-2022-40318 2Debian Frrouting 2Debian Linux Frrouting Jun 17, 2026 May 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and d...Show more An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case. NOTE: this behavior occurs in bgp_open_option_parse in the bgp_open.c file, a different location (with a different attack vector) relative to CVE-2022-40302.Show less
CVE-2022-40302 2Debian Frrouting 2Debian Linux Frrouting Jun 17, 2026 May 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and d...Show more An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.Show less
CVE-2022-36440 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 Apr 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS.
CVE-2022-37032 2Debian Frrouting 2Debian Linux Frrouting Jun 17, 2026 Sep 19, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.

Previous 123 Next