CVE-2023-38283: Medium severity OpenBGPD OpenBGPD vulnerability
In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant remote actor may cause the system to incorrectly reset a session. This is fixed in OpenBSD 7.3 errata 006.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openbgpdto a version that resolves this vulnerability.Fixed in 8.1-1 - Upgrade
Upgrade
debian/openbgpdto a version that resolves this vulnerability.Fixed in 8.8-1Fixed in 9.3-1 - Upgrade
Upgrade
OpenBGPDto a version that resolves this vulnerability.Patch OpenBSD 7.3 errata 006
Event History
Frequently Asked Questions
What is the vulnerability ID for this OpenBGPD vulnerability?
The vulnerability ID for this OpenBGPD vulnerability is CVE-2023-38283.
What is the severity of CVE-2023-38283?
The severity of CVE-2023-38283 is medium with a severity value of 5.3.
How does this vulnerability impact OpenBGPD?
This vulnerability in OpenBGPD could potentially cause the system to incorrectly reset a session.
Can the OpenBGPD vulnerability affect OpenBSD 7.3?
No, OpenBGPD vulnerability does not affect OpenBSD 7.3.
How can I fix CVE-2023-38283 in OpenBGPD?
To fix CVE-2023-38283 in OpenBGPD, you should update to OpenBGPD version 8.1 or apply the OpenBSD 7.3 errata 006 patch.