FRRouting Integer Underflow Vulnerability in BGP UPDATE Message Handling Leading to Denial-of-Service

An integer underflow vulnerability has been identified in FRRouting (FRR) versions stable/10.0 to stable/10.6. This vulnerability allows attackers to cause a denial-of-service (DoS) by sending a crafted BGP UPDATE message. The issue arises because the BGP daemon (bgpd) does not properly validate the length of certain TLV (Type-Length-Value) fields, allowing for exploitation.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the BGP process to crash or become unresponsive.

Remediation

Users can upgrade to FRRouting versions later than stable/10.6 to address this vulnerability.