An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frrUpgrade frr-selinux | Jan 18, 2024 | Nov 3, 2023 |
| Centos_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frr-debugsourceUpgrade frr | Jan 11, 2024 | Nov 3, 2023 |
| Debian | — | Upgrade frr | Apr 29, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade frr-selinuxUpgrade frr | Jan 12, 2024 | Nov 3, 2023 |
| Redhat_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-debuginfoUpgrade frr-selinux | Jan 11, 2024 | Nov 3, 2023 |
| Rocky_linux | — | Upgrade frr-debuginfoUpgrade frrUpgrade frr-debugsource | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade libfrr_pb0Upgrade libmlag_pb0Upgrade libfrrzmq0Upgrade libfrrfpm_pb0Upgrade libfrrospfapiclient0Upgrade libfrrsnmp0Upgrade libfrrgrpc_pb0Upgrade libfrrcares0Upgrade libfrr0Upgrade frr-develUpgrade frr | Dec 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro)Upgrade frr | Nov 22, 2023 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub