CVE-2022-37035 Use after free in n/a
A race condition in FRRouting's BGP daemon allows remote attackers to execute code or disclose information via crafted packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-37035?
CVE-2022-37035 is a high-severity use after free vulnerability in n/a, published on 2 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.
Weakness: CWE-362
Which versions are affected by CVE-2022-37035?
It affects 1 product.
Products include Frrouting Frrouting.
How do I fix CVE-2022-37035?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2022-37035 being exploited?
There is no known exploitation of CVE-2022-37035 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2024-44070 Denial of service in n/a
- CVE-2023-38406 bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
- CVE-2022-26127 Memory corruption in FRRouting
- CVE-2022-26128 Memory corruption in FRRouting
- CVE-2022-26129 Memory corruption in FRRouting
Sources
Also known as DEBIAN-CVE-2022-37035, GHSA-rg6w-grg6-5wqf, UBUNTU-CVE-2022-37035.