Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h4c3-x7vv-8q28

Опубликовано: 07 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

EPSS

Процентиль: 13%
0.00045
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 года назад

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

CVSS3: 7
redhat
около 1 года назад

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

CVSS3: 6.5
nvd
около 1 года назад

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

CVSS3: 6.5
msrc
10 месяцев назад

Описание отсутствует

CVSS3: 6.5
debian
около 1 года назад

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, ...

EPSS

Процентиль: 13%
0.00045
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-120