frr - security update

Fixed packages 1

Vulnerabilities 16

• Critical 9.8
  CVE-2024-44070

  An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual re…

  frr frr quagga frr Debian Ubuntu Azure Linux
  Aug 19, 2024
• High 7.8
  CVE-2022-26129

  Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functi…

  frr frr frr Debian Ubuntu Alpine
  Mar 3, 2022
• High 7.5
  CVE-2022-26125

  Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isis…

  frr frr frr Debian Ubuntu Alpine
  Mar 3, 2022
• High 7.5
  CVE-2023-38407

  bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast par…

  frr frr Debian Ubuntu
  Nov 6, 2023
• High 7.5
  CVE-2023-47234

  An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message …

  frr frr frr Debian Ubuntu Azure Linux
  Nov 3, 2023
• Medium 6.8
  CVE-2023-47235

  An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an E…

  frr frr frr Debian Ubuntu Azure Linux
  Nov 3, 2023
• Medium 6.5
  CVE-2024-31948

  In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the…

  frr frr Debian Ubuntu
  Apr 7, 2024
• Medium 6.5
  CVE-2024-31949

  In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability be…

  frr Debian
  Apr 7, 2024
• Unscored —
  CVE-2022-26126

  Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated bi…

  frr frr frr Debian Ubuntu Alpine
  Mar 3, 2022
• Unscored —
  CVE-2022-26127

  A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in …

  frr frr frr Debian Ubuntu Alpine
  Mar 3, 2022
• Unscored —
  CVE-2022-26128

  A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in th…

  frr frr frr Debian Ubuntu Alpine
  Mar 3, 2022
• Unscored —
  CVE-2022-37035

  An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_…

  frr frr Debian Ubuntu
  Aug 2, 2022
• Unscored —
  CVE-2023-38406

  bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."

  frr frr Debian Ubuntu
  Nov 6, 2023
• Unscored —
  CVE-2023-41909

  An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malforme…

  frr frr Debian Ubuntu
  Sep 5, 2023
• Unscored —
  CVE-2023-46752

  An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.

  frr frr frr Debian Ubuntu Azure Linux
  Oct 26, 2023
• Unscored —
  CVE-2023-46753

  An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mand…

  frr frr quagga frr Debian Ubuntu Azure Linux
  Oct 26, 2023