Описание
In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.
An infinite loop vulnerability was found in FRRouting. Malformed data when receiving an MP/GR capability as a dynamic capability can result in a pointer not advancing.
Отчет
The infinite loop triggered by the receipt of a malformed MP/GR capability in FRRouting represents a moderate severity issue due to its potential impact on system stability and resource utilization. While it does not directly expose sensitive data or allow unauthorized access, the loop can lead to a Denial of Service (DoS) condition by consuming excessive CPU resources, thereby degrading the overall performance of the routing infrastructure. Additionally, the continuous processing of malformed data may destabilize the router, potentially causing intermittent service disruptions or requiring manual intervention to restore normal operation.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | frr | Will not fix | ||
| Red Hat Enterprise Linux 9 | frr | Will not fix |
Показывать по
Дополнительная информация
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.
In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.
In FRRouting (FRR) through 9.1, an infinite loop can occur when receiv ...
In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.
Уязвимость компонента Dynamic Capability Handler программного средства реализации сетевой маршрутизации на Unix-подобных системах FRRouting, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.5 Medium
CVSS3