CVE-2023-41360

Опубликовано: 29 авг. 2023

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.

Ссылки

https://github.com/FRRouting/frr/pull/14245
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
Mailing List
https://github.com/FRRouting/frr/pull/14245
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*

Версия до 9.0 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00244

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2023-41360

CVSS3: 9.1

ubuntu

почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.

CVE-2023-41360

CVSS3: 4.8

redhat

почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.

CVE-2023-41360

CVSS3: 9.1

msrc

почти 2 года назад

Описание отсутствует

CVE-2023-41360

CVSS3: 9.1

debian

почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet. ...

GHSA-8x46-qpq3-2pgp

CVSS3: 9.1

github

почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.

EPSS

Процентиль: 48%

0.00244

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125