Summary
Iggy Frankovic discovered that FRR incorrectly handled certain BGP
messages. A remote attacker could possibly use this issue to cause FRR to
crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | frr | 8.1-1ubuntu1.11 |
| Ubuntu · 24.04 LTS 24.04:LTS | frr | 8.4.4-1.1ubuntu6.2 |
Vulnerabilities 1
-
Critical 9.8
An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual re…
References
-
report
https://ubuntu.com/security/CVE-2024-44070