CVE-2023-3748

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

No affected versions have been published.

Timeline

Published: Jul 24, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-374804.9Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vuln CVE-2023-374814.9Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vuln CVE-2023-374825.3The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated re CVE-2023-374839.8SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against CVE-2023-374845.3SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during logi CVE-2023-374867.5Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access i CVE-2023-374875.3SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access un CVE-2023-374886.1In SAP NetWeaver Process Integration - versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, user-controlled inputs, if not sufficiently CVE-2023-374895.3Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform (Version Management System) - version 403, permits an unau CVE-2023-37495.5A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation.CVE-2023-374909.0SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file crea CVE-2023-374918.8The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.2