Summary
It was discovered that FRR incorrectly handled certain network traffic.
A remote attacker could possibly use this issue to cause FRR to crash,
resulting in a denial of service. (CVE-2022-26126, CVE-2022-26127,
CVE-2022-26128, CVE-2022-26129, CVE-2022-37032, CVE-2022-37035,
CVE-2023-31490, CVE-2023-38406, CVE-2023-38407, CVE-2023-46752,
CVE-2023-46753, CVE-2023-47234, CVE-2023-47235, CVE-2024-31948)
Ben Cartwright-Cox discovered that FRR incorrectly handled certain
network traffic. A remote attacker could possibly use this issue to cause
FRR to crash, resulting in a denial of service. (CVE-2023-38802)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | frr | 7.2.1-1ubuntu0.2+esm2 |
Vulnerabilities 15
-
High 7.8
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functi…
-
High 7.5
bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast par…
-
High 7.5
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message …
-
Medium 6.8
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an E…
-
Medium 6.5
In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the…
-
Unscored —
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated bi…
-
Unscored —
A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in …
-
Unscored —
A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in th…
-
Unscored —CVE-2022-37032 Public exploit
An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of serv…
-
Unscored —
An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_…
-
Unscored —
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_su…
-
Unscored —
bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
-
Unscored —
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a craf…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mand…
References
-
report
https://ubuntu.com/security/CVE-2022-26126
-
report
https://ubuntu.com/security/CVE-2022-26127
-
report
https://ubuntu.com/security/CVE-2022-26128
-
report
https://ubuntu.com/security/CVE-2022-26129
-
report
https://ubuntu.com/security/CVE-2022-37032
-
report
https://ubuntu.com/security/CVE-2022-37035
-
report
https://ubuntu.com/security/CVE-2023-31490
-
report
https://ubuntu.com/security/CVE-2023-38406
-
report
https://ubuntu.com/security/CVE-2023-38407
-
report
https://ubuntu.com/security/CVE-2023-38802
-
report
https://ubuntu.com/security/CVE-2023-46752
-
report
https://ubuntu.com/security/CVE-2023-46753
-
report
https://ubuntu.com/security/CVE-2023-47234
-
report
https://ubuntu.com/security/CVE-2023-47235
-
report
https://ubuntu.com/security/CVE-2024-31948