Buffer Overflow Vulnerability in FRRouting Affected by Input Packet Length Issues
CVE-2022-26125

7.8HIGH

Key Information:

Vendor

Frrouting

Status
Frrouting
Vendor
CVE Published:
3 March 2022

What is CVE-2022-26125?

A buffer overflow vulnerability exists in FRRouting versions up to 8.1.0, caused by insufficient checks on the input packet length within the isisd/isis_tlvs.c file. This flaw could potentially be exploited by attackers to disrupt network operations or execute arbitrary code, highlighting the need for timely security updates and rigorous input validation in network routing solutions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FRRouting through 8.1.0

References

https://github.com/FRRouting/frr/issues/10507
https://lists.debian.org/debian-lts-announce/2024/04/msg0...
mailing-list

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.