CVE-2023-3748
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-3748
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3748.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-3748
- Related
- Published
- 2023-07-24T16:15:13Z
- Modified
- 2024-09-18T03:24:41.503322Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
- References
Affected packages
Debian:12 / frr
Package
- Name
- frr
- Purl
- pkg:deb/debian/frr?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:13 / frr
Package
- Name
- frr
- Purl
- pkg:deb/debian/frr?arch=source
Git / github.com/frrouting/frr
Affected ranges
- Type
- GIT
- Repo
- https://github.com/frrouting/frr
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
7.*
7.1_pulled
8.*
8.1-dev
base_7.*
base_7.2
base_7.3
base_7.4
base_7.5
base_7.6
base_8.*
base_8.0
base_8.1
base_8.2
base_8.3
base_8.4
frr-2.*
frr-2.0
frr-2.0-rc1
frr-2.0-rc2
frr-3.*
frr-3.0-branchpoint
frr-3.0-rc0
frr-3.0-rc1
frr-3.1-dev
frr-5.*
frr-5.1-dev
frr-6.*
frr-6.1-dev
frr-7.*
frr-7.1-dev
frr-7.2-dev
frr-7.3-dev
frr-7.4-dev
frr-7.5-dev
frr-7.6-dev
frr-8.*
frr-8.0-dev
frr-8.1-dev
frr-8.1-rc1
frr-8.2-dev
frr-8.3-dev
frr-8.4-dev
reindent-3.*
reindent-3.0-after
reindent-3.0-before
Other
reindent-master-after
reindent-master-before