CVE-2022-40302

Name of the Vulnerable Software and Affected Versions FRRouting versions through 8.4

Description An issue in bgpd allows attackers to cause a denial of service by crafting a BGP OPEN message with an option of type 0xff, leading to inconsistent boundary checks and potential out-of-bounds read or assertion failure and daemon restart.

Recommendations For versions through 8.4, consider disabling the BGP OPEN message handler until a patch is available to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.