Логотип exploitDog
bind: "CVE-2022-40302"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2022-40302"

Количество 8

Количество 8

ubuntu логотип

CVE-2022-40302

около 2 лет назад

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2022-40302

около 2 лет назад

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2022-40302

около 2 лет назад

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2022-40302

около 2 лет назад

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By cra ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-j7hm-p94x-q9pw

около 2 лет назад

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2023-02322

около 2 лет назад

Уязвимость компонента BGP OPEN Message Handler программного средства реализации сетевой маршрутизации на Unix-подобных системах FRRouting связана с выходом операции за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

CVSS3: 6.5
EPSS: Низкий
oracle-oval логотип

ELSA-2023-6434

больше 1 года назад

ELSA-2023-6434: frr security and bug fix update (MODERATE)

EPSS: Низкий
redos логотип

ROS-20240403-09

около 1 года назад

Множественные уязвимости frr

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-40302

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 6.5
0%
Низкий
около 2 лет назад
redhat логотип
CVE-2022-40302

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 6.5
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2022-40302

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 6.5
0%
Низкий
около 2 лет назад
debian логотип
CVE-2022-40302

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By cra ...

CVSS3: 6.5
0%
Низкий
около 2 лет назад
github логотип
GHSA-j7hm-p94x-q9pw

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS3: 7.5
0%
Низкий
около 2 лет назад
fstec логотип
BDU:2023-02322

Уязвимость компонента BGP OPEN Message Handler программного средства реализации сетевой маршрутизации на Unix-подобных системах FRRouting связана с выходом операции за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

CVSS3: 6.5
0%
Низкий
около 2 лет назад
oracle-oval логотип
ELSA-2023-6434

ELSA-2023-6434: frr security and bug fix update (MODERATE)

больше 1 года назад
redos логотип
ROS-20240403-09

Множественные уязвимости frr

CVSS3: 7.5
около 1 года назад

Уязвимостей на страницу