An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frr-selinuxUpgrade frr | Jan 18, 2024 | Nov 3, 2023 |
| Centos_linux | — | Upgrade frr-selinuxUpgrade frr-debugsourceUpgrade frr-debuginfoUpgrade frr | Jan 11, 2024 | Nov 3, 2023 |
| Debian | — | Upgrade frr | Apr 29, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade frrUpgrade frr-selinux | Jan 12, 2024 | Nov 3, 2023 |
| Redhat_linux | — | Upgrade frr-selinuxUpgrade frr-debuginfoUpgrade frrUpgrade frr-debugsource | Jan 11, 2024 | Nov 3, 2023 |
| Rocky_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-debuginfo | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade libfrrgrpc_pb0Upgrade libfrrfpm_pb0Upgrade libfrrsnmp0Upgrade libfrrospfapiclient0Upgrade frr-develUpgrade libfrrcares0Upgrade libfrr0Upgrade libmlag_pb0Upgrade frrUpgrade libfrrzmq0Upgrade libfrr_pb0 | Dec 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro)Upgrade frr | Nov 22, 2023 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub