An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frrUpgrade frr-selinux | Jan 18, 2024 | Nov 3, 2023 |
| Centos_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frrUpgrade frr-debugsource | Jan 11, 2024 | Nov 3, 2023 |
| Debian | — | Upgrade frr | Apr 29, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade frrUpgrade frr-selinux | Jan 12, 2024 | Nov 3, 2023 |
| Redhat_linux | — | Upgrade frr-debugsourceUpgrade frrUpgrade frr-debuginfoUpgrade frr-selinux | Jan 11, 2024 | Nov 3, 2023 |
| Rocky_linux | — | Upgrade frr-debuginfoUpgrade frrUpgrade frr-debugsource | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade libfrr0Upgrade libfrr_pb0Upgrade libfrrzmq0Upgrade frr-develUpgrade libfrrcares0Upgrade libmlag_pb0Upgrade frrUpgrade libfrrgrpc_pb0Upgrade libfrrsnmp0Upgrade libfrrospfapiclient0Upgrade libfrrfpm_pb0 | Dec 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro)Upgrade frr | Nov 22, 2023 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub