Lucene search
Ubuntu.comUB:CVE-2022-36440HistoryApr 03, 2023 - 12:00 a.m.
CVE-2022-36440
2023-04-0300:00:00
ubuntu.com
ubuntu.com
16
frrouting frr-bgpd 8.3.0; reachable assertion; bgp open packets; denial of service; github issue 13202; unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
64.8%
A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the
peek_for_as4_capability function. Attackers can maliciously construct BGP
open packets and send them to BGP peers running frr-bgpd, resulting in DoS.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | introduced by https://github.com/FRRouting/frr/commit/d08c0c8077fbb3e100ed2e87927edec1a09d224b |
Related
nessus
nessus
Fedora 37 : frr (2023-2cb0f34efe)
2023-04-21 00:00:00
Fedora 36 : frr (2023-14ec79ae02)
2023-04-21 00:00:00
Fedora 38 : frr (2023-77d00facd0)
2023-04-21 00:00:00
openvas
openvas
Fedora: Security Advisory for frr (FEDORA-2023-2cb0f34efe)
2023-04-23 00:00:00
Fedora: Security Advisory for frr (FEDORA-2023-77d00facd0)
2023-04-23 00:00:00
Fedora: Security Advisory for frr (FEDORA-2023-14ec79ae02)
2023-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: frr-8.5-1.fc36
2023-04-21 01:25:22
[SECURITY] Fedora 38 Update: frr-8.5-1.fc38
2023-04-21 02:09:50
[SECURITY] Fedora 37 Update: frr-8.5-1.fc37
2023-04-21 02:11:27
redhatcve
redhatcve
CVE-2022-36440
2023-04-04 19:43:04
osv
osv
CVE-2022-36440
2023-04-03 16:15:07
Moderate: frr security and bug fix update
2023-11-07 00:00:00
frr - security update
2023-09-19 00:00:00
prion
prion
Authentication flaw
2023-04-03 16:15:00
veracode
veracode
Denial Of Service (DoS)
2023-04-30 10:30:19
cvelist
cvelist
CVE-2022-36440
2023-04-03 00:00:00
cve
cve
CVE-2022-36440
2023-04-03 16:15:07
debiancve
debiancve
CVE-2022-36440
2023-04-03 16:15:07
nvd
nvd
CVE-2022-36440
2023-04-03 16:15:07
oraclelinux
oraclelinux
frr security and bug fix update
2023-11-11 00:00:00
redhat
redhat
(RHSA-2023:6434) Moderate: frr security and bug fix update
2023-11-07 06:05:29
almalinux
almalinux
Moderate: frr security and bug fix update
2023-11-07 00:00:00
redos
redos
ROS-20240403-09
2024-04-03 00:00:00
debian
debian
[SECURITY] [DSA 5495-1] frr security update
2023-09-11 07:14:35
[SECURITY] [DLA 3573-1] frr security update
2023-09-19 19:41:22
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
64.8%
Related for UB:CVE-2022-36440