CVE-2023-41361

CriticalCVSS 9.8

Published: 29/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

An issue was discovered in FRRouting FRR 9.0, where bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

The lack of validation for the software version length may lead to potential attacks that could affect the stability and security of the system.

It is recommended to upgrade to the latest version of FRRouting that includes fixes for this vulnerability.

Original NVD description (English source)

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.