CVE-2023-41361

Summary

CVE-2023-41361 is a vulnerability affecting FRRouting FRR 9.0's bgpd component. The issue arises from a lack of input validation in the bgp_open.c module, which fails to check for an excessively long length of the received software version. An attacker could exploit this flaw by sending an oversized software version string to trigger a buffer overflow or memory exhaustion, potentially leading to denial-of-service conditions or code injection. System administrators should update to the latest FRR version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.