FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frrUpgrade frr-selinux | Sep 25, 2023 | Aug 29, 2023 |
| Centos_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frr-debugsourceUpgrade frr | Sep 19, 2023 | Aug 29, 2023 |
| Debian | — | Upgrade frr | Sep 12, 2023 | Aug 29, 2023 |
| Oracle_linux | — | Upgrade frr-selinuxUpgrade frr | Sep 19, 2023 | Aug 29, 2023 |
| Palo Alto Networks Pan Os | — | Upgrade Palo Alto Networks PAN-OS to the latest version | Jan 7, 2025 | Sep 13, 2023 |
| Panos | — | — | Dec 14, 2023 | Aug 29, 2023 |
| Redhat_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frrUpgrade frr-debugsource | Sep 19, 2023 | Aug 29, 2023 |
| Suse | — | Upgrade quagga-develUpgrade libfrrgrpc_pb0Upgrade frrUpgrade libfrrfpm_pb0Upgrade libmlag_pb0Upgrade libfrr_pb0Upgrade libospfapiclient0Upgrade libfrrospfapiclient0Upgrade libquagga_pb0Upgrade libfrrzmq0Upgrade frr-develUpgrade libfrrcares0Upgrade libfpm_pb0Upgrade libzebra1Upgrade libfrr0Upgrade libfrrsnmp0Upgrade quaggaUpgrade libospf0 | Sep 21, 2023 | Aug 29, 2023 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro)Upgrade frr | Jun 7, 2024 | Aug 29, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub