CVE-2017-15865: Infoleak
bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-15865?
CVE-2017-15865 is a vulnerability in bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, which allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer.
How does CVE-2017-15865 impact FRRouting?
CVE-2017-15865 allows remote attackers to obtain sensitive information through a malformed BGP UPDATE packet, potentially leading to unauthorized access or data leakage.
What is the severity of CVE-2017-15865?
The severity of CVE-2017-15865 is high, with a severity value of 7.5.
How can I fix CVE-2017-15865?
To fix CVE-2017-15865, it is recommended to upgrade FRRouting to version 2.0.2 or 3.0.2, or apply the necessary patches provided by the vendor.
Where can I find more information about CVE-2017-15865?
You can find more information about CVE-2017-15865 at the following references: - [Security Focus](http://www.securityfocus.com/bid/101794) - [FRRouting Security](https://frrouting.org/community/security.html) - [Cumulus Networks Security](https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html)