CVE-2023-41359

Name of the Vulnerable Software and Affected Versions FRRouting FRR versions through 9.0

Description An issue was discovered in FRRouting FRR, where there is an out-of-bounds read in bgp attr aigp valid in bgpd/bgp attr.c because there is no check for the availability of two bytes during AIGP validation. This could allow a remote attacker to cause a denial of service.

Recommendations For FRRouting FRR versions through 9.0, consider disabling the bgp attr aigp valid function until a patch is available to prevent potential exploitation. Restrict access to the bgpd/bgp attr.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.