CVE Catalog
CVE-2023-41360
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk0.96%
57th percentile - higher than 57% of all known CVEs
Summary
An issue was discovered in FRRouting FRR through 9.0 that allows reading the initial byte of the ORF header in an ahead-of-stream situation.
Risk Assessment
This vulnerability may lead to unauthorized access to data in the BGP protocol, posing a risk to the integrity and confidentiality of information transmitted over the network.
Recommendation
It is recommended to upgrade to the latest version of FRRouting to mitigate this vulnerability and to monitor logs for potential exploitation attempts.
Original NVD description (English source)
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.