Summary
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.
Security Fix(es):
* frr: incorrect length check in bgp_capability_llgr() can lead do DoS (CVE-2023-31489)
* frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490)
* frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358)
* frr: out of bounds read in bgp_attr_aigp_valid (CVE-2023-41359)
* frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909)
* frr: mishandled malformed data leading to a crash (CVE-2023-46752)
* frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753)
* frr: ahead-of-stream read of ORF header (CVE-2023-41360)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | frr | 8.5.3-4.el9 |
| AlmaLinux · 9 | frr-selinux | 8.5.3-4.el9 |
Vulnerabilities 8
-
Critical 9.1
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in …
-
Unscored —
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_l…
-
Unscored —
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_su…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malforme…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mand…
References
-
report
https://access.redhat.com/security/cve/CVE-2023-31489
-
report
https://access.redhat.com/security/cve/CVE-2023-31490
-
report
https://access.redhat.com/security/cve/CVE-2023-41358
-
report
https://access.redhat.com/security/cve/CVE-2023-41359
-
report
https://access.redhat.com/security/cve/CVE-2023-41360
-
report
https://access.redhat.com/security/cve/CVE-2023-41909
-
report
https://access.redhat.com/security/cve/CVE-2023-46752
-
report
https://access.redhat.com/security/cve/CVE-2023-46753
-
report
https://bugzilla.redhat.com/2235839
-
report
https://bugzilla.redhat.com/2235840
-
report
https://bugzilla.redhat.com/2235842
-
report
https://bugzilla.redhat.com/2237416
-
report
https://bugzilla.redhat.com/2238990
-
report
https://bugzilla.redhat.com/2238992
-
report
https://bugzilla.redhat.com/2246379
-
report
https://bugzilla.redhat.com/2246381
-
advisory
https://errata.almalinux.org/9/ALSA-2024-2156.html