bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frrUpgrade frr-selinux | Jan 18, 2024 | Nov 6, 2023 |
| Centos_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frrUpgrade frr-debugsource | Jan 11, 2024 | Nov 6, 2023 |
| Debian | — | Upgrade frr | Apr 29, 2024 | Nov 6, 2023 |
| Oracle_linux | — | Upgrade frr-selinuxUpgrade frr | Jan 12, 2024 | Feb 24, 2023 |
| Redhat_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frrUpgrade frr-debugsource | Jan 11, 2024 | Nov 6, 2023 |
| Rocky_linux | — | Upgrade frr-debugsourceUpgrade frrUpgrade frr-debuginfo | Mar 5, 2024 | Nov 6, 2023 |
| Suse | — | Upgrade libfrr0Upgrade frrUpgrade libfrr_pb0Upgrade frr-develUpgrade libmlag_pb0Upgrade libfrrzmq0Upgrade libfrrfpm_pb0Upgrade libfrrospfapiclient0Upgrade libfrrsnmp0Upgrade libfrrgrpc_pb0Upgrade libfrrcares0 | Dec 7, 2023 | Nov 6, 2023 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro)Upgrade frr | Nov 22, 2023 | Nov 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub