Security Advisory

CVE-2017-15865

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-11-08 20:00:00

Last updated 2024-08-05 20:04:50

Assigner mitre

State PUBLISHED

Description

bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).

← Browse all CVEs View on cve.org ↗