Vulnerability Description
An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case. NOTE: this behavior occurs in bgp_open_option_parse in the bgp_open.c file, a different location (with a different attack vector) relative to CVE-2022-40302.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Frrouting | Frrouting | <= 8.4 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- https://github.com/FRRouting/frr/releasesThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00020.htmlMailing ListThird Party Advisory
- https://www.debian.org/security/2023/dsa-5495Third Party Advisory
- https://github.com/FRRouting/frr/releasesThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00020.htmlMailing ListThird Party Advisory
- https://www.debian.org/security/2023/dsa-5495Third Party Advisory
FAQ
What is CVE-2022-40318?
CVE-2022-40318 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (ass...
How severe is CVE-2022-40318?
CVE-2022-40318 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-40318?
Check the references section above for vendor advisories and patch information. Affected products include: Frrouting Frrouting, Debian Debian Linux.