CVE-2023-3748

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-3748
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3748.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-3748
Downstream
Related
Published
2023-07-24T15:19:20.511Z
Modified
2026-09-04T03:45:10.758740414Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Inifinite loop in babld message parsing may cause dos
Details

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.

Database specific 
{
    "cwe_ids": [
        "CWE-835"
    ],
    "cna_assigner": "redhat",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3748.json"
}
References

Affected packages

Git / github.com/frrouting/frr

Affected ranges

Type
GIT
Repo
https://github.com/frrouting/frr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b81570c690d79ebc1a03708dc17d33caa9639a5f
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "8.5"
        }
    ]
}

Affected versions

7.*
7.1_pulled
8.*
8.1-dev
base_7.*
base_7.2
base_7.3
base_7.4
base_7.5
base_7.6
base_8.*
base_8.0
base_8.1
base_8.2
base_8.3
base_8.4
frr-3.*
frr-3.0-branchpoint
frr-3.1-dev
frr-5.*
frr-5.1-dev
frr-6.*
frr-6.1-dev
frr-7.*
frr-7.1-dev
frr-7.2-dev
frr-7.3-dev
frr-7.4-dev
frr-7.5-dev
frr-7.6-dev
frr-8.*
frr-8.0-dev
frr-8.1-dev
frr-8.1-rc1
frr-8.2-dev
frr-8.3-dev
frr-8.4-dev
Other
reindent-master-after
reindent-master-before

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3748.json"