← Back to CVE Index

CVE-2023-41361

Disclosed 2023-08-29

Description

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

Severity

Critical

Affected FRR Versions

• 9.0.0

Versions prior to 8.4 are end-of-life and no longer receive security updates.

References

URL	Source
https://github.com/FRRouting/frr/pull/14241/commits/b4d09af9194d20a7f9f16995a062f5d8e3d32840	GitHub

Git Fixes

• b4d09af9194d20a7f9f16995a062f5d8e3d32840
• 73ad93a83f18564bb7bff4659872f7ec1a64b05e

Raw Data

• CVE-2023-41361.cve.json — CVE record (JSON)
• CVE-2023-41361.frr.json — FRR-specific data (JSON)