CVE-2023-38406

Summary

CVE-2023-38406 is a vulnerability affecting the FRRouting (FRR) software's bgpd component, specifically in the bgp_flowspec.c file, before version 8.4.3. This issue involves mishandling of an NLRI (Network Layer Reachability Information) length of zero, which results in a "flowspec overflow." This vulnerability could potentially be exploited by an attacker to cause the BGP (Border Gateway Protocol) process to crash or even gain unauthorized access to the system. It is recommended that users upgrade their FRR software to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.