Skip to content
OpenAdvisories
Medium RHSA-2023:6434 4 CVEs

Red Hat Security Advisory: frr security and bug fix update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream frr 0:8.3.1-11.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream frr-debuginfo 0:8.3.1-11.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream frr-debugsource 0:8.3.1-11.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream frr-selinux 0:8.3.1-11.el9_3

Vulnerabilities 4

  • Medium 6.5
    CVE-2022-40302

    An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0…

    frr Debian
  • Unscored —
    CVE-2022-36440

    A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can mali…

    frr Debian
  • Unscored —
    CVE-2022-40318

    An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0…

    frr Debian
  • Unscored —
    CVE-2022-43681

    An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message …

    frr Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2168855
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2184468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2196088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2196090
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2196091
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2216912
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6434.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-36440
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-36440
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-36440
  • report
    https://access.redhat.com/security/cve/CVE-2022-40302
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-40302
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-40302
  • report
    https://access.redhat.com/security/cve/CVE-2022-40318
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-40318
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-40318
  • report
    https://access.redhat.com/security/cve/CVE-2022-43681
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-43681
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-43681