CVE-2017-15865

bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain…

published November 8, 2017

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02494 · 84.5th percentile
Published
2017-11-08T20:00Z
EPSS history
Timeline
  • 08 NOV 20:00Z
    bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain…
    cvelistv5