high7.5
CVE-2023-45886
The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing…
Impact
The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Next | Version 20.0.1 |
| F5 | Big-Ip Next Service Proxy For Kubernetes | from 1.5.0 through 1.8.2 |
| F5 | Big-Ip Next Cloud-Native Network Functions | from 1.1.0 through 1.1.1 |
| F5 | Big-Ip Local Traffic Manager | from 13.1.0 through 13.1.5 from 14.1.0 through 14.1.5 from 15.1.0 through 15.1.10 from 16.1.0 through 16.1.4 from 17.1.0 through 17.1.1 |
| F5 | Big-Ip Global Traffic Manager | from 13.1.0 through 13.1.5 from 14.1.0 through 14.1.5 from 15.1.0 through 15.1.10 from 16.1.0 through 16.1.4 from 17.1.0 through 17.1.1 |
| Ipinfusion | Zebos | through 7.10.6 |
References
- NVD record
- CVE.org record
- https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling
- https://my.f5.com/manage/s/article/K000137315
- https://www.ipinfusion.com/doc_prod_cat/zebos/
- https://www.kb.cert.org/vuls/id/347067
- https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling
- https://my.f5.com/manage/s/article/K000137315
- https://www.ipinfusion.com/doc_prod_cat/zebos/
- https://www.kb.cert.org/vuls/id/347067