An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade frr-selinuxUpgrade frr | Jan 18, 2024 | Nov 3, 2023 |
| Centos_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-selinuxUpgrade frr-debuginfo | Jan 11, 2024 | Nov 3, 2023 |
| Debian | — | Upgrade frr | Apr 29, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade frr-selinuxUpgrade frr | Jan 12, 2024 | Nov 3, 2023 |
| Redhat_linux | — | Upgrade frr-debuginfoUpgrade frr-selinuxUpgrade frrUpgrade frr-debugsource | Jan 11, 2024 | Nov 3, 2023 |
| Rocky_linux | — | Upgrade frrUpgrade frr-debugsourceUpgrade frr-debuginfo | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade libmlag_pb0Upgrade libfrrfpm_pb0Upgrade libfrrospfapiclient0Upgrade libfrrzmq0Upgrade libfrr_pb0Upgrade frrUpgrade frr-develUpgrade libfrr0Upgrade libfrrsnmp0Upgrade libfrrcares0Upgrade libfrrgrpc_pb0 | Dec 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade frrUpgrade frr (Ubuntu Pro) | Nov 22, 2023 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub