Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frr | Nov 21, 2022 | Mar 3, 2022 |
| Alpine Linux | — | Upgrade frr | Aug 22, 2024 | Mar 3, 2022 |
| Centos_linux | — | Upgrade frr-debuginfoUpgrade frr-debugsourceUpgrade frr | Nov 16, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade frr | Apr 29, 2024 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade frr | Nov 22, 2022 | Feb 6, 2022 |
| Redhat_linux | — | No solution existsUpgrade frr-debuginfoUpgrade frrUpgrade frr-debugsource | Nov 16, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-debuginfo | Mar 12, 2024 | Mar 3, 2022 |
| Suse | — | Upgrade libmlag_pb0Upgrade libfrrzmq0Upgrade frr-develUpgrade libfrrcares0Upgrade libfrrfpm_pb0Upgrade libfrrgrpc_pb0Upgrade frrUpgrade libfrrospfapiclient0Upgrade libfrr0Upgrade libfrr_pb0Upgrade libfrrsnmp0 | Mar 19, 2022 | Mar 3, 2022 |
| Ubuntu | — | Upgrade frr | Nov 19, 2024 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub