Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-38802

24
FAUCET Score

CVE-2023-38802 is a denial-of-service vulnerability affecting FRRouting FRR versions 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2. A remote attacker can exploit this flaw by sending a specially crafted BGP update containing a corrupted Tunnel Encapsulation attribute. With a CVSS score of 7.5 (High), this vulnerability requires no user interaction and has a high impact on availability, potentially leading to prolonged internet outages. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 7.5.1, <= 9.0CPE matchmatch criteria
cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*
4.3.3.2CPE matchmatch criteria
cpe:2.3:o:pica8:picos:4.3.3.2:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
11.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
12.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.37%
Probability of exploitation in next 30 days
EPSS Percentile
69.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0137 is in the 49th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (15)

microsoftpatch availablevia msrc
Product: 18323-16823Fixed in: 8.5.3-2
microsoftpatch availablevia msrc
Product: cbl2 frr 8.5.3-2 on CBL Mariner 2.0Fixed in: 8.5.3-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 8.5.3-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 8.5.3-2
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: frr-0:7.0-5.el8_2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: frr-0:7.0-5.el8_2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: frr-0:7.5-4.el8_4.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: frr-0:7.5-4.el8_4.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: frr-0:7.5-4.el8_4.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: frr-0:7.5-11.el8_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: frr-0:8.3.1-5.el9_2.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: frr-0:8.0-5.el9_0.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: frr-0:7.5.1-7.el8_8.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: frr-0:7.0-5.el8_1.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: frr-0:7.0-5.el8_2.1
View patch

Vendor Advisories (3)

microsoft2023-Sep/CVE-2023-38802

CVE-2023-38802

Sep 12, 2023
redhatCVE-2023-38802Important

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

Aug 29, 2023
microsoft2023-Aug/CVE-2023-38802Important

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

Aug 8, 2023

References

blog.benjojo.co.uk / post/bgp-path-attributes-grave-error-handling
ExploitTechnical DescriptionThird Party Advisory
lists.debian.org / debian-lts-announce/2023/09/msg00020.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO
Mailing List
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE
Mailing List
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4
Mailing List
news.ycombinator.com / item
Third Party Advisory
debian.org / security/2023/dsa-5495
Third Party Advisory