Out-of-Bounds Read in BGP Daemon of FRRouting Affects FRR Software
CVE-2022-37032
9.1CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-37032?
An out-of-bounds read vulnerability within the BGP daemon of FRRouting (FRR) versions prior to 8.4 may cause a segmentation fault, ultimately leading to denial of service. This issue is particularly present in the bgp_capability_msg_parse function located in bgpd/bgp_packet.c. Exploitation of this vulnerability can destabilize the service, requiring immediate attention and patching to ensure network reliability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.