Threats tagged 'ghsa-88xw-q94w-q9mr'

A critical vulnerability (CVE-2024-44070) exists in FRRouting (FRR) through version 10.1. The issue is in the BGP implementation where the function bgp_attr_encap in bgpd/bgp_attr.c fails to verify the remaining stream length before processing a TLV value. This flaw can lead to severe impacts including full confidentiality, integrity, and availability compromise.