Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-46753

Опубликовано: 26 окт. 2023
Источник: redhat
CVSS3: 5.9
EPSS Низкий

Описание

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.

A flaw was found in FRRouting. A crash can occur for a crafted BGP UPDATE message without mandatory attributes (for example, one with only an unknown transit attribute).

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=2246381frr: crafted BGP UPDATE message leading to a crash

EPSS

Процентиль: 26%
0.00086
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.

CVSS3: 5.9
nvd
почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.

CVSS3: 5.9
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 5.9
debian
почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0.1. A crash can oc ...

CVSS3: 7.5
github
почти 2 года назад

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.

EPSS

Процентиль: 26%
0.00086
Низкий

5.9 Medium

CVSS3