Vulnerability · Published Jul 24, 2023 · Assigned by redhat

CVE-2023-3748Inifinite loop in babld message parsing may cause dos

Low 3.5

In plain English

A low-severity infinite loop in Fedora from Fedora. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.5Low

Exploit odds (30 days)0.8%top 44.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	frr	8.4.4-1.1~deb12u2	DEBIAN-CVE-2023-3748
Debian:13	frr	9.1-0.1	DEBIAN-CVE-2023-3748
Debian:14	frr	9.1-0.1	DEBIAN-CVE-2023-3748

Affected products (as reported)

Vendor	Product	Versions
n/a	frr	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Fedora	Fedora	see references

Weakness: CWE-835 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

https://access.redhat.com/security/cve/CVE-2023-3748 vdb-entry, x_refsource_REDHAT
RHBZ#2223668 issue-tracking, x_refsource_REDHAT