Buffer Overflow Vulnerability in FRRouting Affected by Input Packet Length Issues
CVE-2022-26125

7.8HIGH

Key Information:

Vendor

Frrouting

Status
Vendor
CVE Published:
3 March 2022

What is CVE-2022-26125?

A buffer overflow vulnerability exists in FRRouting versions up to 8.1.0, caused by insufficient checks on the input packet length within the isisd/isis_tlvs.c file. This flaw could potentially be exploited by attackers to disrupt network operations or execute arbitrary code, highlighting the need for timely security updates and rigorous input validation in network routing solutions.

Affected Version(s)

FRRouting through 8.1.0

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.