FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frrUpgrade frr-selinux | Sep 25, 2023 | Aug 29, 2023 |
| Centos_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frr-debugsourceUpgrade frr | Sep 19, 2023 | Aug 29, 2023 |
| Debian | — | Upgrade frr | Sep 12, 2023 | Aug 29, 2023 |
| Oracle_linux | — | Upgrade frrUpgrade frr-selinux | Sep 19, 2023 | Aug 29, 2023 |
| Palo Alto Networks Pan Os | — | Upgrade Palo Alto Networks PAN-OS to the latest version | Jan 7, 2025 | Sep 13, 2023 |
| Panos | — | — | Dec 14, 2023 | Aug 29, 2023 |
| Redhat_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-selinuxUpgrade frr-debuginfo | Sep 19, 2023 | Aug 29, 2023 |
| Suse | — | Upgrade libfrrzmq0Upgrade libfrr_pb0Upgrade libfrrgrpc_pb0Upgrade libquagga_pb0Upgrade libfrrfpm_pb0Upgrade libmlag_pb0Upgrade libospfapiclient0Upgrade frrUpgrade libfrrospfapiclient0Upgrade libfpm_pb0Upgrade libzebra1Upgrade quaggaUpgrade libospf0Upgrade libfrr0Upgrade frr-develUpgrade libfrrcares0Upgrade libfrrsnmp0Upgrade quagga-devel | Sep 21, 2023 | Aug 29, 2023 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro)Upgrade frr | Jun 7, 2024 | Aug 29, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub