Frrouting vulnerabilities, page 3

49 vulnerabilities

Known vulnerabilities in Frrouting products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

7.5CVE-2023-47234debianfrr+2
EPSS score
0.91%
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).7.5CVE-2023-31490debianfrr+4
EPSS score
2.15%
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.5.5CVE-2023-31489debianfrr+2
EPSS score
1.03%
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.5.9CVE-2023-46752debianfrr+2
EPSS score
0.85%
An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.5.9CVE-2023-46753debianfrr+3
EPSS score
0.78%
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.7.5CVE-2023-38802debianfrr+10
EPSS score
1.78%
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).9.8CVE-2023-38406debianfrr+2
EPSS score
0.94%
bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."7.5CVE-2023-38407debianfrr+2
EPSS score
0.93%
bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.7.5CVE-2023-3748debianfrr+1
EPSS score
0.78%
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.