Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46547
HistoryApr 19, 2024 - 10:34 a.m.

Denial Of Service (DoS)

2024-04-1910:34:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
denial of service
frrouting/frr
prefix sid attribute
bgpd daemon

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

FRRouting/frr is vulnerable to Denial of Service (DoS). This vulnerability occurs due to improper handling of the Prefix SID attribute in the bgp_attr_malformed function within bgp_attr.c, leading to a crash of the bgpd daemon.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%