frr - security update

Fixed packages 1

Vulnerabilities 10

• Critical 9.1
  CVE-2023-41360

  An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in …

  frr frr quagga frr Debian Ubuntu Azure Linux
  Aug 29, 2023
• Medium 6.5
  CVE-2022-40302

  An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0…

  frr Debian
  May 3, 2023
• Unscored —
  CVE-2022-36440

  A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can mali…

  frr Debian
  Apr 3, 2023
• Unscored —
  CVE-2022-40318

  An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0…

  frr Debian
  May 3, 2023
• Unscored —
  CVE-2022-43681

  An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message …

  frr Debian
  May 3, 2023
• Unscored —
  CVE-2023-31490

  An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_su…

  frr frr frr Debian Ubuntu Azure Linux
  May 9, 2023
• Unscored —
  CVE-2023-38802

  FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a craf…

  frr frr frr Debian Ubuntu Azure Linux
  Aug 29, 2023
• Unscored —
  CVE-2023-41358

  An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.

  frr frr quagga frr Debian Ubuntu Azure Linux
  Aug 29, 2023
• Unscored —
  CVE-2023-41361

  An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv soft…

  frr Debian
  Aug 29, 2023
• Unscored —
  CVE-2023-41909

  An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malforme…

  frr frr Debian Ubuntu
  Sep 5, 2023