Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Qingkaishio

#23564of 53,633
10Total CVSS
Vulnerabilities · 1
PT-2022-4363
10
2022-03-03
Frrouting · Frrouting · CVE-2022-26129
**Name of the Vulnerable Software and Affected Versions** FRRouting versions through 8.1.0 **Description** The issue is related to buffer overflow vulnerabilities due to incorrect checks on the subtlv length in the functions `parse hello subtlv`, `parse ihu subtlv`, and `parse update subtlv` in `babeld/message.c`. This can allow a remote attacker to execute arbitrary code. **Recommendations** For FRRouting versions through 8.1.0, as a temporary workaround, consider disabling the functions `parse hello subtlv()`, `parse ihu subtlv()`, and `parse update subtlv()` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.