CVE-2023-38802

Katalog CVE

CVSS 7.5 · High EPSS 1,8%

Kerentanan Improper Validation of Integrity Check Value pada frrouting, pica8 picos +2 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

Rincian

Terbit di NVD

29 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-354: Improper Validation of Integrity Check Value

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling exploit · deskripsi teknis · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html mailing list · advisory pihak ketiga
• https://news.ycombinator.com/item?id=37305800 advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5495 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V7... mailing list
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25... mailing list
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7... mailing list