cveboard RSS feed

CVE-2023-3748

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Inifinite loop in babld message parsing may cause dos

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

frr

Vendor
n/a
Product
frr
Platforms
Unknown
Default status
Unknown
frr · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8.5unaffectedUnavailableUnavailableUnavailableNone listed

Red Hat Enterprise Linux 8

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8
Platforms
Unknown
Default status
unaffected
Package
frr
Package collection
https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 9

Vendor
Red Hat
Product
Red Hat Enterprise Linux 9
Platforms
Unknown
Default status
unaffected
Package
frr
Package collection
https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Fedora

Vendor
Fedora
Product
Fedora
Platforms
Unknown
Default status
unaffected
Package
frr
Package collection
https://packages.fedoraproject.org/

No explicit version tuples; consult this entry's default status.