CVE-2023-38802

by Fred · 29/08/2023

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

Date published : 2023-08-29

https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling

https://news.ycombinator.com/item?id=37305800