CVE Catalog
CVE-2023-38283
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk1.12%
62th percentile - higher than 62% of all known CVEs
Summary
In OpenBGPD before 8.1, incorrect handling of BGP update data may cause the system to incorrectly reset a session by a potentially distant remote actor.
Risk Assessment
The organization may be exposed to attacks that could disrupt BGP communication, affecting network stability.
Recommendation
It is recommended to upgrade to OpenBSD 7.3 with errata 006 to mitigate this vulnerability.
Original NVD description (English source)
In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant remote actor may cause the system to incorrectly reset a session. This is fixed in OpenBSD 7.3 errata 006.