← Back to CVE Index

CVE-2023-46752

Disclosed 2023-11-03

Description

An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.

Severity

High

Affected FRR Versions

• < 8.5.4
• 9.0.0 ~ 9.0.1

Versions prior to 8.4 are end-of-life and no longer receive security updates.

References

URL	Source
https://github.com/FRRouting/frr/commit/b08afc81c60607a4f736f418f2e3eb06087f1a35	GitHub

Git Fixes

• b08afc81c60607a4f736f418f2e3eb06087f1a35
• 8ec1d39b2767b7f90b888645df75ab41e9923f7a
• d19727b4ac595f17da530f5fa0bbd3bb16ea2aa1
• 30b5c2a434d25981e16792f6f50162beb517ae4d
• adb99e47ffc9eed01b467c4cc35ab8513c73a5b8

Raw Data

• CVE-2023-46752.cve.json — CVE record (JSON)
• CVE-2023-46752.frr.json — FRR-specific data (JSON)