CVE-2023-3748

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
References
Link Resource
https://access.redhat.com/security/cve/CVE-2023-3748 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2223668 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*

History

02 Aug 2023, 14:46

Type Values Removed Values Added
First Time Frrouting frrouting
Frrouting
CPE cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*
CWE CWE-835
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2223668 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2223668 - Issue Tracking, Third Party Advisory
References (MISC) https://access.redhat.com/security/cve/CVE-2023-3748 - (MISC) https://access.redhat.com/security/cve/CVE-2023-3748 - Third Party Advisory

24 Jul 2023, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-07-24 16:15

Updated : 2024-02-28 20:33


NVD link : CVE-2023-3748

Mitre link : CVE-2023-3748

CVE.ORG link : CVE-2023-3748


JSON object : View

Products Affected

frrouting

  • frrouting
CWE
CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')