NetSight
high7.5

CVE-2024-44070

An issue was discovered in FRRouting (FRR) through 10.1.

Impact

An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.

Affected products

VendorProductAffected versions
FrroutingFrrouting
through 10.1
RedhatEnterprise Linux
Versions 8.0, 9.0

References