VulnerabilityModified

CVE-2017-15865

HIGH 7.5EPSS 2.49%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.49%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).

CVSS 3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 2.49% probability · 84th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: frrouting/frrouting
Source: cve@mitre.org

References

http://www.securityfocus.com/bid/101794Third Party Advisory, VDB Entry
https://frrouting.org/community/security.htmlIssue Tracking, Vendor Advisory
https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.htmlIssue Tracking, Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690Issue Tracking, Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-DisclosureIssue Tracking, Third Party Advisory
http://www.securityfocus.com/bid/101794Third Party Advisory, VDB Entry
https://frrouting.org/community/security.htmlIssue Tracking, Vendor Advisory
https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.htmlIssue Tracking, Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690Issue Tracking, Third Party Advisory
https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-DisclosureIssue Tracking, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.