An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frr-selinuxUpgrade frr | May 15, 2023 | Sep 19, 2022 |
| Centos_linux | — | Upgrade frrUpgrade frr-debuginfoUpgrade frr-debugsourceUpgrade frr-selinux | May 15, 2023 | Sep 19, 2022 |
| Debian | — | Upgrade frr | Nov 30, 2022 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade frrUpgrade frr-selinux | May 18, 2023 | Sep 20, 2022 |
| Redhat_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-selinuxUpgrade frr-debuginfo | May 15, 2023 | Sep 19, 2022 |
| Suse | — | Upgrade libfrrospfapiclient0Upgrade libfrrcares0Upgrade libfrrzmq0Upgrade frrUpgrade libfrrgrpc_pb0Upgrade libmlag_pb0Upgrade libfrrfpm_pb0Upgrade libfrr_pb0Upgrade libfrrsnmp0Upgrade libfrr0Upgrade frr-devel | Oct 26, 2022 | Sep 19, 2022 |
| Ubuntu | — | Upgrade quaggaUpgrade frrUpgrade frr (Ubuntu Pro)Upgrade quagga-bgpd | Oct 19, 2022 | Sep 19, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub