CVE-2022-43681 - CVE House
Back to Database
Status published Medium CVE-2022-43681

An out-of-bounds read exists in the BGP daemon of FRRouting...

Vulnerability Description

An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43681

Credits & Attribution

No credits recorded in the NVD database.

References

More from frrouting

View All →
CVE-2022-40318
An issue was discovered in bgpd in FRRouting (FRR) through...
Medium 6.5
CVE-2022-40302
An issue was discovered in bgpd in FRRouting (FRR) through...
Unknown 0
CVE-2022-37035
An issue was discovered in bgpd in FRRouting (FRR) 8.3....
High 8.1
CVE-2022-37032
An out-of-bounds read in the BGP daemon of FRRouting FRR...
Critical 9.1
CVE-2022-36440
A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in...
High 7.5

Affected Vendor

Affected Software

frrouting, debian linux
Vulnerable Versions:
0, 10.0, 11.0, 12.0

Timeline

Official Publish: May 3rd, 2023
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.