Skip to main content

Out-of-bounds Read

CVE-2022-40302

Medium
6.5/10

Summary

An issue was discovered in "bgpd" in FRRouting (FRR) prior to frr-8.3.2 and frr-8.4-dev. By crafting a BGP OPEN message with an option of type "0xff" (Extended Length from RFC 9072), attackers may cause a Denial of Service (assertion failure and daemon restart, or Out-of-bounds Read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this "0xff" case.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-125 - Out-of-Bounds Read

Out-of-bounds read is a vulnerability that allows access to memory beyond the authorized accessible location. Such a vulnerability compromises the confidentiality of the trusted environment in the application and enables an attacker to launch further attacks by leveraging the exposed information.

References

Advisory Timeline

  • Published