CVE-2023-38283
First published: Tue Aug 29 2023(Updated: )
In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant remote actor may cause the system to incorrectly reset a session. This is fixed in OpenBSD 7.3 errata 006.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openbgpd Openbgpd | <8.1 | |
| Openbsd Openbsd | <7.3 | |
| Openbsd Openbsd | =7.3 | |
| Openbsd Openbsd | =7.3-errata_001 | |
| Openbsd Openbsd | =7.3-errata_002 | |
| Openbsd Openbsd | =7.3-errata_003 | |
| Openbsd Openbsd | =7.3-errata_004 | |
| Openbsd Openbsd | =7.3-errata_005 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this OpenBGPD vulnerability?
The vulnerability ID for this OpenBGPD vulnerability is CVE-2023-38283.
What is the severity of CVE-2023-38283?
The severity of CVE-2023-38283 is medium with a severity value of 5.3.
How does this vulnerability impact OpenBGPD?
This vulnerability in OpenBGPD could potentially cause the system to incorrectly reset a session.
Can the OpenBGPD vulnerability affect OpenBSD 7.3?
No, OpenBGPD vulnerability does not affect OpenBSD 7.3.
How can I fix CVE-2023-38283 in OpenBGPD?
To fix CVE-2023-38283 in OpenBGPD, you should update to OpenBGPD version 8.1 or apply the OpenBSD 7.3 errata 006 patch.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-api
- collector/nvd-index
- vendor/openbgpd
- canonical/openbgpd openbgpd
- vendor/openbsd
- canonical/openbsd openbsd
- version/openbsd openbsd/7.3
- version/openbsd openbsd/7.3-errata_001
- version/openbsd openbsd/7.3-errata_002
- version/openbsd openbsd/7.3-errata_003
- version/openbsd openbsd/7.3-errata_004
- version/openbsd openbsd/7.3-errata_005