An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frr-selinuxUpgrade frr | May 8, 2024 | Sep 5, 2023 |
| Debian | — | Upgrade frr | Sep 21, 2023 | Sep 5, 2023 |
| Oracle_linux | — | Upgrade frrUpgrade frr-selinux | May 15, 2024 | Sep 5, 2023 |
| Redhat_linux | — | Upgrade frr-selinuxUpgrade frr-debugsourceUpgrade frrUpgrade frr-debuginfo | May 1, 2024 | Sep 5, 2023 |
| Rocky_linux | — | Upgrade frr-debuginfoUpgrade frrUpgrade frr-debugsource | May 8, 2025 | Sep 5, 2023 |
| Suse | — | Upgrade libfrrospfapiclient0Upgrade libfrrgrpc_pb0Upgrade libfrrfpm_pb0Upgrade libfrrsnmp0Upgrade libfrrzmq0Upgrade libfrr_pb0Upgrade libmlag_pb0Upgrade frrUpgrade libfrr0Upgrade frr-develUpgrade libfrrcares0 | Sep 21, 2023 | Sep 5, 2023 |
| Ubuntu | — | Upgrade frrUpgrade frr (Ubuntu Pro) | Oct 19, 2023 | Sep 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub