CVE-2017-15865

Опубликовано: 08 нояб. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).

Ссылки

http://www.securityfocus.com/bid/101794
Third Party Advisory
VDB Entry
https://frrouting.org/community/security.html
Issue Tracking
Vendor Advisory
https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html
Issue Tracking
Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690
Issue Tracking
Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-Disclosure
Issue Tracking
Third Party Advisory
http://www.securityfocus.com/bid/101794
Third Party Advisory
VDB Entry
https://frrouting.org/community/security.html
Issue Tracking
Vendor Advisory
https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html
Issue Tracking
Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690
Issue Tracking
Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-Disclosure
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*

Версия до 2.0.2 (исключая)

cpe:2.3:a:frrouting:frrouting:3.0:*:*:*:*:*:*:*

cpe:2.3:a:frrouting:frrouting:3.0:rc0:*:*:*:*:*:*

cpe:2.3:a:frrouting:frrouting:3.0:rc1:*:*:*:*:*:*

cpe:2.3:a:frrouting:frrouting:3.0:rc2:*:*:*:*:*:*

cpe:2.3:a:frrouting:frrouting:3.0:rc3:*:*:*:*:*:*

cpe:2.3:a:frrouting:frrouting:3.0.1:*:*:*:*:*:*:*

cpe:2.3:o:cumulusnetworks:cumulus_linux:*:*:*:*:*:*:*:*

Версия до 3.4.3 (исключая)

EPSS

Процентиль: 67%

0.0055

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2017-15865

CVSS3: 7.5

debian

около 8 лет назад

bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in ...

SUSE-SU-2024:3524-1

suse-cvrf

больше 1 года назад

Security update for frr

GHSA-rh69-rw6w-x274

CVSS3: 7.5

github

больше 3 лет назад

SUSE-SU-2024:3478-1

suse-cvrf

больше 1 года назад

Security update for quagga

SUSE-SU-2024:3433-1

suse-cvrf

больше 1 года назад

Security update for quagga

EPSS

Процентиль: 67%

0.0055

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200