Unscored CVE-2023-45886 EUVD-2023-50149GHSA-rwrc-24vx-qh33

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update…

Published Nov 21, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.

Advisories 1

WID-SEC-2023-2747 F5 BIG-IP: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 25, 2023

References

https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling
https://www.kb.cert.org/vuls/id/347067
https://www.ipinfusion.com/doc_prod_cat/zebos/
https://my.f5.com/manage/s/article/K000137315