Summary
[10.4.3-3]
- Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message
[10.4.3-2]
- Resolves: RHEL-174678 - denial of service via crafted FlowSpec component
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | frr10 | 0:10.4.3-3.el9_8 |
| Oracle Linux · 9 | frr10-selinux | 0:10.4.3-3.el9_8 |
Vulnerabilities 2
-
High 7.5
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of …
-
High 7.5
An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) …