An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-frralma-upgrade-frr-selinux | May 8, 2024 | Oct 26, 2023 | |
| Debian | debian-upgrade-frr | Apr 29, 2024 | Oct 26, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-frroracle-linux-upgrade-frr-selinux | May 15, 2024 | Oct 26, 2023 |
| Redhat_linux | redhat-upgrade-frrredhat-upgrade-frr-debuginforedhat-upgrade-frr-debugsourceredhat-upgrade-frr-selinux | May 1, 2024 | Oct 26, 2023 | |
| Rocky_linux | rocky-upgrade-frrrocky-upgrade-frr-debuginforocky-upgrade-frr-debugsource | May 8, 2025 | Oct 26, 2023 | |
| Suse | — | suse-upgrade-frrsuse-upgrade-frr-develsuse-upgrade-libfrr0suse-upgrade-libfrr_pb0suse-upgrade-libfrrcares0suse-upgrade-libfrrfpm_pb0suse-upgrade-libfrrgrpc_pb0suse-upgrade-libfrrospfapiclient0suse-upgrade-libfrrsnmp0suse-upgrade-libfrrzmq0suse-upgrade-libmlag_pb0 | Nov 20, 2023 | Oct 26, 2023 |
| Ubuntu | ubuntu-pro-upgrade-frrubuntu-upgrade-frrubuntu-upgrade-quaggaubuntu-upgrade-quagga-bgpd | Nov 16, 2023 | Oct 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub