bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-11-08T20:00:00
Updated: 2024-08-05T20:04:50.367Z
Reserved: 2017-10-24T00:00:00
Link: CVE-2017-15865
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-11-08T20:29:00.557
Modified: 2024-11-21T03:15:21.743
Link: CVE-2017-15865
Redhat
No data.