Summary
Iggy Frankovic discovered that FRR incorrectly handled certain BGP
messages. A remote attacker could possibly use this issue to cause FRR to
crash, resulting in a denial of service. This issue only affected Ubuntu
20.04 LTS. (CVE-2024-44070)
It was discovered that FRR re-validated all routes in certain instances
when the internal socket's buffer size overflowed. A remote attacker could
possibly use this issue to impact the performance of FRR, resulting in a
denial of service. (CVE-2024-55553)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | frr | 8.1-1ubuntu1.13 |
| Ubuntu · 24.04 LTS 24.04:LTS | frr | 8.4.4-1.1ubuntu6.3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | frr | 7.2.1-1ubuntu0.2+esm3 |
Vulnerabilities 2
-
Critical 9.8
An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual re…
-
High 7.5
In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via…