Threats tagged 'ghsa-j25q-23f5-6558'

FRRouting versions 8.4 and later contain a vulnerability in bgpd where dynamic BGP neighbors disconnecting can cause a double free of memory if the peer-group used by a "bgp listen range" also has a Site-of-Origin (SoO) configured. This double free leads to bgpd aborting and dropping all BGP sessions on the router. The issue can be triggered by any host within the listen range opening and closing two TCP connections to the BGP port without sending BGP messages or knowing the AS number. If a TCP-MD5 password is set on the peer-group, only hosts with the password can trigger the issue. Legitimate dynamic neighbor flaps can also cause the problem. Only configurations combining a listen range with a SoO on the same peer-group are affected.