An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attack…

An off-by-one out-of-bounds write vulnerability has been discovered in FRRouting (FRR) stable/10.0. The vulnerability exists in the bgp_flowspec_op_decode() function within the bgpd/bgp_flowspec_util.c file. Attackers can exploit this vulnerability by supplying a crafted FlowSpec component to cause a Denial of Service (DoS) condition. The vulnerability affects the BGP FlowSpec implementation, which is used for traffic filtering and flow specification in BGP routing. This represents a significant security risk for network infrastructure using FRRouting software.