CVE-2023-3748CWE-835

Inifinite loop in babld message parsing may cause dos

Low · published July 24, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00778 · 55.4th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2023-07-24T15:19Z
EPSS history
Timeline
  • 24 JUL 15:19Z
    Inifinite loop in babld message parsing may cause dos
    cvelistv5