Vulnerabilities (CVE)

Filtered by vendor Frrouting Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-41360 3 Debian, Fedoraproject, Frrouting 3 Debian Linux, Fedora, Frrouting 2023-12-22 N/A 9.1 CRITICAL
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.
CVE-2023-41359 2 Fedoraproject, Frrouting 2 Fedora, Frrouting 2023-12-22 N/A 9.1 CRITICAL
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
CVE-2023-38406 1 Frrouting 1 Frrouting 2023-11-14 N/A 9.8 CRITICAL
bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."