CVE-2023-46752

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46752
An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35 Patch
https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35 Patch
https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
https://lists.debian.org/debian-lts-announce/2024/09/msg00007.html
Configurations

Configuration 1 (hide)

cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*
History

04 Nov 2025, 17:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/09/msg00007.html -

21 Nov 2024, 08:29

Type Values Removed Values Added
References () https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35 - Patch () https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html - () https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html -

28 Apr 2024, 07:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html -

13 Nov 2023, 16:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 5.9

03 Nov 2023, 15:14

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CWE NVD-CWE-Other
CPE cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*
References (MISC) https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35 - (MISC) https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35 - Patch
First Time Frrouting frrouting
Frrouting

26 Oct 2023, 11:44

Type Values Removed Values Added
New CVE
Information

Published : 2023-10-26 05:15

Updated : 2025-11-04 17:15

NVD link : CVE-2023-46752

Mitre link : CVE-2023-46752

CVE.ORG link : CVE-2023-46752

JSON object : View

Products Affected

frrouting

  • frrouting
CWE
NVD-CWE-Other