An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frr-selinuxUpgrade frr | May 8, 2024 | Sep 5, 2023 |
| Debian | — | Upgrade frr | Sep 21, 2023 | Sep 5, 2023 |
| Oracle_linux | — | Upgrade frrUpgrade frr-selinux | May 15, 2024 | Sep 5, 2023 |
| Redhat_linux | — | Upgrade frr-selinuxUpgrade frrUpgrade frr-debugsourceUpgrade frr-debuginfo | May 1, 2024 | Sep 5, 2023 |
| Rocky_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-debuginfo | May 8, 2025 | Sep 5, 2023 |
| Suse | — | Upgrade libfrr0Upgrade frrUpgrade libfrrcares0Upgrade libmlag_pb0Upgrade frr-develUpgrade libfrrzmq0Upgrade libfrr_pb0Upgrade libfrrgrpc_pb0Upgrade libfrrsnmp0Upgrade libfrrospfapiclient0Upgrade libfrrfpm_pb0 | Sep 21, 2023 | Sep 5, 2023 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro)Upgrade frr | Oct 19, 2023 | Sep 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub