GoogleOSV:CVE-2023-47235CVE-2023-47235
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.0%
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.
| CPE | Name | Operator | Version |
|---|---|---|---|
| frr | eq | base_8.0 | |
| frr | eq | frr-7.3-de | |
| frr | eq | frr-3.0-rc0 | |
| frr | eq | frr-7.2-de | |
| frr | eq | frr-2.0-rc1 | |
| frr | eq | base_7.6 | |
| frr | eq | base_8.5 | |
| frr | eq | frr-8.0-de | |
| frr | eq | frr-8.5-de | |
| frr | eq | frr-3.0-branchpoint |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.0%