CVE-2023-38283

Katalog CVE

CVSS 5.3 · Medium EPSS 1,4%

Kerentanan Improper Check for Unusual or Exceptional Conditions pada openbgpd. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant remote actor may cause the system to incorrectly reset a session. This is fixed in OpenBSD 7.3 errata 006.

Rincian

Terbit di NVD

29 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-754: Improper Check for Unusual or Exceptional Conditions

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 70,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/006_bgpd.patch.sig patch
• https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling exploit · advisory pihak ketiga
• https://github.com/openbgpd-portable/openbgpd-portable/releases/tag/8.1 release notes
• https://news.ycombinator.com/item?id=37305800 mailing list
• https://www.openbsd.org/errata73.html release notes