CVE-2022-37035

An issue was discovered in bgpd in FRRouting (FRR) 8.3

published August 2, 2022

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02649 · 85.5th percentile
Published
2022-08-02T00:00Z
EPSS history
Timeline
  • 02 AUG 00:00Z
    An issue was discovered in bgpd in FRRouting (FRR) 8.3
    cvelistv5