Summary
[8.5.3-4]
- Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash
[8.5.3-3]
- Resolves: RHEL-14822 - mishandled malformed data leading to a crash
[8.5.3-2]
- Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
- Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message
[8.5.3-1]
- Resolves: RHEL-15291 - Rebase FRR to version 8.5.3 in RHEL9
[8.3.1-12]
- Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | frr | 0:8.5.3-4.el9 |
| Oracle Linux · 9 | frr-selinux | 0:8.5.3-4.el9 |
Vulnerabilities 8
-
Critical 9.1
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in …
-
Unscored —
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_l…
-
Unscored —
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_su…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malforme…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mand…