CVE-2017-15865

bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).

• CWE-200

• http://www.securityfocus.com/bid/101794Third Party Advisory, VDB Entry
• https://frrouting.org/community/security.htmlIssue Tracking, Vendor Advisory
• https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.htmlIssue Tracking, Third Party Advisory
• https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690Issue Tracking, Third Party Advisory
• https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-DisclosureIssue Tracking, Third Party Advisory
• http://www.securityfocus.com/bid/101794Third Party Advisory, VDB Entry
• https://frrouting.org/community/security.htmlIssue Tracking, Vendor Advisory
• https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.htmlIssue Tracking, Third Party Advisory
• https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690Issue Tracking, Third Party Advisory
• https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-DisclosureIssue Tracking, Third Party Advisory

Published

Nov 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15859While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_S…
• CVE-2017-15860In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-15861In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-15862In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-15863Cross Site Scripting (XSS) exists in the wp-noexternallinks …
• CVE-2017-15864In the Agent Frontend in Open Ticket Request System (OTRS) 3…
• CVE-2017-15867Multiple cross-site scripting (XSS) vulnerabilities in the u…
• CVE-2017-15868The bnep_add_connection function in net/bluetooth/bnep/core.…7.8
• CVE-2017-15869Cross-site scripting (XSS) vulnerability in knowledgebase.ph…
• CVE-2017-15870Palo Alto Networks GlobalProtect Agent before 4.0.3 allows a…
• CVE-2017-15871The deserialize function in serialize-to-js through 1.1.1 al…7.5
• CVE-2017-15872phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmp…