Use-After-Free Vulnerability in BGP Implementation of FRRouting Software

CVE-2022-37035

What is CVE-2022-37035?

An issue has been identified in the BGP implementation of FRRouting version 8.3, where a use-after-free condition can occur due to a race condition within the bgp_notify_send_with_data() and bgp_process_packet() functions in bgp_packet.c. This vulnerability allows an attacker to craft malicious BGP packets that could potentially lead to Remote Code Execution or Information Disclosure. Notably, the exploitation of this vulnerability does not require any user interaction, increasing the risk associated with it.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References