Name: CVE-2023-41360: Out-of-bounds Read
Creator: Rapid7
Published: 2023-08-29T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-41360, CWE-125, CVSS 9.1, EPSS 0.01153

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.

CVSS Details

CVSS 3.1 Base Score: 9.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade frrUpgrade frr-selinux	May 8, 2024	Aug 29, 2023
Debian	—	Upgrade frr	Sep 21, 2023	Aug 29, 2023
Oracle_linux	—	Upgrade frr-selinuxUpgrade frr	May 15, 2024	Aug 29, 2023
Redhat_linux	—	Upgrade frrUpgrade frr-debugsourceUpgrade frr-selinuxUpgrade frr-debuginfo	May 1, 2024	Aug 29, 2023
Suse	—	Upgrade frr-develUpgrade libmlag_pb0Upgrade libfrr0Upgrade libfrr_pb0Upgrade libfrrsnmp0Upgrade libfrrzmq0Upgrade libfrrcares0Upgrade libfrrospfapiclient0Upgrade frrUpgrade libfrrfpm_pb0	Sep 21, 2023	Aug 29, 2023
Ubuntu	—	Upgrade quaggaUpgrade frr (Ubuntu Pro)Upgrade frrUpgrade quagga (Ubuntu Pro)	Oct 18, 2023	Aug 29, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence