Wind River Support Network

HomeDefectsLIN1022-5237

Fixed

LIN1022-5237 : Security Advisory - frr - CVE-2023-38802

Created: Aug 29, 2023 Updated: Oct 12, 2023

Resolved Date: Oct 12, 2023

Found In Version: 10.22.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

CREATE(Triage):(User=admin) CVE-2023-38802 (https://nvd.nist.gov/vuln/detail/CVE-2023-38802)

CVEs

CVE-2023-38802