CVE-2023-41909 — Vulnetix

CVE-2023-41909 PUBLISHED

Es besteht eine Schwachstelle im FRRouting-Projekt FRRouting. Dieser Fehler existiert in bgpd/bgp_flowspec.c-Prozessen, die Anfragen ohne Attribute erlauben, was zu einer NULL-Zeiger-Dereferenz führt. Ein Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.

EPSS 0.10% · 27.8th percentile

Risk Scores

EPSS Score

0.10%

27.8th percentile

Affected Products

Vendor	Product	Versions
Fedora	Fedora Linux
Ubuntu	Ubuntu Linux
SUSE	SUSE Linux
Debian	Debian Linux
FRRouting Project	FRRouting Project FRRouting <=9.0
Red Hat	Red Hat Enterprise Linux

Timeline

Sep 4, 2023 CVE Published
Sep 5, 2023 EPSS Score
Oct 8, 2023 EPSS Score
Nov 9, 2023 EPSS Score
Jan 14, 2024 EPSS Score
Feb 15, 2024 EPSS Score
Mar 19, 2024 EPSS Score
Apr 21, 2024 EPSS Score
May 24, 2024 EPSS Score
Jun 25, 2024 EPSS Score
Aug 30, 2024 EPSS Score
Oct 1, 2024 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2263.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2263 advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-41909 advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html advisory
https://lists.suse.com/pipermail/sle-security-updates/2023-September/016260.html advisory
https://lists.suse.com/pipermail/sle-security-updates/2023-September/016319.html advisory
https://ubuntu.com/security/notices/USN-6436-1 advisory
https://bodhi.fedoraproject.org/updates/FEDORA-2023-514db5339e advisory
https://bodhi.fedoraproject.org/updates/FEDORA-2023-61abba57d8 advisory
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ce436d56f8 advisory
https://access.redhat.com/errata/RHSA-2024:2156 advisory
https://access.redhat.com/errata/RHSA-2024:2981 advisory
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BBQ2F6B52UDKPMMML6F24O4RGXPC3B6U/ advisory

Open in Interactive Console →