Vulnerabilities > CVE-2024-44070

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

frrouting

redhat

NVD

Published: 2024-08-19

Updated: 2024-08-30

Summary

An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.

Vulnerable Configurations

Part	Description	Count
Application	Frrouting Frrouting Frrouting - Frrouting Frrouting 2.0 Frrouting Frrouting 2.0.1 Frrouting Frrouting 2.0.2 Frrouting Frrouting 3.0 Frrouting Frrouting 3.0.1 Frrouting Frrouting 3.0.2 Frrouting Frrouting 3.0.3 Frrouting Frrouting 3.0.4 Frrouting Frrouting 4.0 Frrouting Frrouting 4.0.1 Frrouting Frrouting 5.0 Frrouting Frrouting 5.0.1 Frrouting Frrouting 5.0.2 Frrouting Frrouting 6.0 Frrouting Frrouting 6.0.1 Frrouting Frrouting 6.0.2 Frrouting Frrouting 6.0.3 Frrouting Frrouting 7.0 Frrouting Frrouting 7.0.1 Frrouting Frrouting 7.1 Frrouting Frrouting 7.2 Frrouting Frrouting 7.2.1 Frrouting Frrouting 7.3 Frrouting Frrouting 7.3.1 Frrouting Frrouting 7.4 Frrouting Frrouting 7.5 Frrouting Frrouting 7.5.1 Frrouting Frrouting 8.0 Frrouting Frrouting 8.0.1 Frrouting Frrouting 8.1 Frrouting Frrouting 8.2 Frrouting Frrouting 8.2.1 Frrouting Frrouting 8.2.2 Frrouting Frrouting 8.3 Frrouting Frrouting 8.3.1 Frrouting Frrouting 8.3.2 Frrouting Frrouting 8.4 Frrouting Frrouting 8.4.1 Frrouting Frrouting 8.4.2 Frrouting Frrouting 8.4.3 Frrouting Frrouting 8.4.5 Frrouting Frrouting 8.5 Frrouting Frrouting 8.5.1 Frrouting Frrouting 8.5.3 Frrouting Frrouting 8.5.4 Frrouting Frrouting 8.5.5 Frrouting Frrouting 9.0 Frrouting Frrouting 9.0.1 Frrouting Frrouting 9.0.2 Frrouting Frrouting 9.0.3 Frrouting Frrouting 9.1 Frrouting Frrouting 9.1.1 Frrouting Frrouting 10.0 Frrouting Frrouting 10.0.1 Frrouting Frrouting 10.1	68
OS	Redhat Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	2

References

https://github.com/FRRouting/frr/pull/16497

Vulnerabilities > CVE-2024-44070 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2024-44070"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2024-44070