Description
bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| SLES 15 SP5 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| SLES 15 SP4 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SLES 15 SP4 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| SLES 15 SP3 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SLES 15 SP3 | quagga | 1.1.1-150000.4.6.1 | SUSE-SU-2024:3433-1 |
| SLES 15 SP2 | quagga | 1.1.1-150000.4.6.1 | SUSE-SU-2024:3433-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | quagga | 1.1.1-17.13.1 | SUSE-SU-2024:3426-1 |
| SLES for SAP 15 SP4 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SLES for SAP 15 SP4 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| SLES for SAP 15 SP3 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SLES for SAP 15 SP3 | quagga | 1.1.1-150000.4.6.1 | SUSE-SU-2024:3433-1 |
| SLES for SAP 15 SP2 | quagga | 1.1.1-150000.4.6.1 | SUSE-SU-2024:3433-1 |
| SLES for SAP 12 SP5 | quagga | 1.1.1-17.13.1 | SUSE-SU-2024:3426-1 |
| SLE HPC 15 SP4 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SLE HPC 15 SP4 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| SLE HPC 15 SP3 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SLE HPC 15 SP3 | quagga | 1.1.1-150000.4.6.1 | SUSE-SU-2024:3433-1 |
| SLE HPC 15 SP2 | quagga | 1.1.1-150000.4.6.1 | SUSE-SU-2024:3433-1 |
| SUSE Manager Server 4.3 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SUSE Manager Server 4.3 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| SUSE Manager Proxy 4.3 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SUSE Manager Proxy 4.3 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| SUSE Enterprise Storage 7.1 | frr | 7.4-150300.4.32.1 | SUSE-SU-2024:3524-1 |
| SUSE Enterprise Storage 7.1 | quagga | 1.1.1-150000.4.6.1 | SUSE-SU-2024:3433-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
| openSUSE Leap 15.5 | quagga | 1.1.1-150400.12.8.1 | SUSE-SU-2024:3478-1 |
Advisories 4
- SUSE-SU-2024:3478-1 Security update for quagga SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3426-1 Security update for quagga SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3433-1 Security update for quagga SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3524-1 Security update for frr SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html
- https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-Disclosure
- https://frrouting.org/community/security.html
- 101794 vdb-entry
- https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690