CVE-2023-41361

Опубликовано: 29 авг. 2023

Источник: debian

EPSS Низкий

Описание

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

Пакет	Статус	Версия исправления	Релиз	Тип
frr	fixed	9.1-0.1		package
frr	not-affected		bullseye	package

https://github.com/FRRouting/frr/pull/14241
Fixed by: https://github.com/FRRouting/frr/commit/b4d09af9194d20a7f9f16995a062f5d8e3d32840
Backport for 9.0 branch: https://github.com/FRRouting/frr/pull/14250
Fixed by: https://github.com/FRRouting/frr/commit/73ad93a83f18564bb7bff4659872f7ec1a64b05e

EPSS

Процентиль: 65%

0.00498

Низкий

CVE-2023-41361

CVSS3: 9.8

ubuntu

почти 2 года назад

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

CVE-2023-41361

CVSS3: 5.9

redhat

почти 2 года назад

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

CVE-2023-41361

CVSS3: 9.8

nvd

почти 2 года назад

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

CVE-2023-41361

CVSS3: 9.8

msrc

12 месяцев назад

Описание отсутствует

GHSA-v7v6-22w5-689p

CVSS3: 9.8

github

почти 2 года назад

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

EPSS

Процентиль: 65%

0.00498

Низкий