Lucene search
HistoryNov 06, 2023 - 6:15 a.m.
CVE-2023-38407
frrouting
cve
2023
38407
bgpd
bgp_label.c
stream reading
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%
bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.
Affected configurations
Node
frroutingfrroutingRange<8.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| frrouting:frrouting | frrouting | lt | 8.5 |
Related
prion
prion
Stack overflow
2023-11-06 06:15:00
redhatcve
redhatcve
CVE-2023-38407
2023-11-07 14:56:36
cvelist
cvelist
CVE-2023-38407
2023-11-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-11-07 07:05:17
ubuntucve
ubuntucve
CVE-2023-38407
2023-11-06 00:00:00
vulnrichment
vulnrichment
CVE-2023-38407
2023-11-06 00:00:00
debiancve
debiancve
CVE-2023-38407
2023-11-06 06:15:40
nvd
nvd
CVE-2023-38407
2023-11-06 06:15:40
osv
osv
CVE-2023-38407
2023-11-06 06:15:40
Moderate: frr security update
2024-01-12 19:57:06
Moderate: frr security update
2024-01-10 00:00:00
oraclelinux
oraclelinux
frr security update
2024-01-26 00:00:00
frr security update
2024-01-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2245-1)
2024-07-01 00:00:00
Ubuntu: Security Advisory (USN-6498-1)
2023-11-22 00:00:00
Debian: Security Advisory (DLA-3797-1)
2024-04-29 00:00:00
nessus
nessus
SUSE SLES15 Security Update : frr (SUSE-SU-2024:2245-1)
2024-06-29 00:00:00
RHEL 9 : frr (RHSA-2024:0477)
2024-01-25 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2023:4663-1)
2023-12-07 00:00:00
redhat
redhat
(RHSA-2024:0477) Moderate: frr security update
2024-01-24 14:41:11
(RHSA-2024:1113) Moderate: frr security update
2024-03-05 10:45:35
(RHSA-2024:0130) Moderate: frr security update
2024-01-10 09:30:22
rocky
rocky
frr security update
2024-01-12 19:57:06
almalinux
almalinux
Moderate: frr security update
2024-01-10 00:00:00
Moderate: frr security update
2024-01-25 00:00:00
ubuntu
ubuntu
FRR vulnerabilities
2023-11-21 00:00:00
FRR vulnerabilities
2024-06-05 00:00:00
redos
redos
ROS-20240617-02
2024-06-17 00:00:00
debian
debian
[SECURITY] [DLA 3797-1] frr security update
2024-04-28 06:30:09
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%
Related for CVE-2023-38407