CVE-2023-3748
Inifinite loop in babld message parsing may cause dos
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Inifinite loop in babld message parsing may cause dos
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
- Record
CVE-2023-3748- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-835
- Updated
- 2026-11-02
EUVDEUVD-2023-44383
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
- Record
EUVD-2023-44383- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w8cg-4xhg-9fgw
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are...
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
- Record
GHSA-w8cg-4xhg-9fgw- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-835
- Updated
- 2026-11-02
NVD
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
- Record
CVE-2023-3748- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSV
Inifinite loop in babld message parsing may cause dos
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
- Record
CVE-2023-3748- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-835
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-3748
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service.
- Record
DEBIAN-CVE-2023-3748- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13191-1 No score
frr-8.4-5.1 on GA media
These are all security issues fixed in the frr-8.4-5.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13191-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3709-1 No score
Security update for frr
This update for frr fixes the following issues:
- CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284).
- CVE-2023-41358: Fixed crash in bgpd/bgp_packet.c (bsc#1214735).
- CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgp_packet.c (bsc#1214739).
- CVE-2023-3748: Fixed inifinite loop in babld message parsing may cause DoS (bsc#1213434).
- CVE-2023-41909: Fixed NULL pointer dereference due to processing in bgp_nlri_parse_flowspec (bsc#1215065).
- Record
SUSE-SU-2023:3709-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:4090-1 No score
Security update for frr
This update for frr fixes the following issues:
Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for:
- CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950, CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234, CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360, CVE-2023-41358,CVE-2023-38802,CVE-2023-38407,CVE-2023-38406, CVE-2023-3748,CVE-2023-31490,CVE-2023-31489 and other bugfixes. See https://frrouting.org/release/8.5.6/ for details.
The most recent frr 8.x series provides several new features, improvements and bug fixes for various protocols and daemons, especially for PIM/PIMv6/BGP and VRF support.
See https://frrouting.org/release/8.5/ for details and links.
- Record
SUSE-SU-2024:4090-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
frrDebian:12 |
before 8.4.4-1.1~deb12u2, plus listed versions 8.4.2-18.4.4-18.4.4-1.1~deb12u1 |
8.4.4-1.1~deb12u2 |
frrDebian:13 |
before 9.1-0.1 | 9.1-0.1 |
frrDebian:14 |
before 9.1-0.1 | 9.1-0.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP5 From an advisory covering 5 CVEs |
before 8.4-150500.4.8.1 | 8.4-150500.4.8.1 |
frropenSUSE:Leap 15.5 From an advisory covering 5 CVEs |
before 8.4-150500.4.8.1 | 8.4-150500.4.8.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP5 From an advisory covering 19 CVEs |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP6 From an advisory covering 19 CVEs |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Leap 15.5 From an advisory covering 19 CVEs |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Leap 15.6 From an advisory covering 19 CVEs |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 8.4-5.1 | 8.4-5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-3748 is a low vulnerability (CVSS 3.5) in Frrouting, published July 24, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in frr 8.4.4-1.1~deb12u2.
References
access.redhat.com/security/cve/CVE-2023-3748
bugzilla.redhat.com/show_bug.cgi?id=2223668
nvd.nist.gov/vuln/detail/CVE-2023-3748
github.com/advisories/GHSA-w8cg-4xhg-9fgw
packages.fedoraproject.org
Show 28 moreShow less
security-tracker.debian.org/tracker/CVE-2023-3748
suse.com/support/update/announcement/2023/suse-su-20233709-1
bugzilla.suse.com/1213284