Description
A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | frr | 8.4.1-1 | — |
| Debian 13 | frr | 8.4.1-1 | — |
| Debian 12 | frr | 8.4.1-1 | — |
| Debian 10 | frr | 7.5.1-1.1+deb10u1 | DLA-3573-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | frr +1 | 8.3.1-11.el9_3 | RHSA-2023:6434 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | frr +1 | 8.3.1-11.el9_3.alma.1 | ALSA-2023:6434 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | frr +1 | 8.3.1-11.el9_3 | ELSA-2023-6434 |
Advisories 4
- ALSA-2023:6434 Moderate: frr security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- DLA-3573-1 frr - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2023:6434 Red Hat Security Advisory: frr security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- ELSA-2023-6434 Moderate: frr security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 11, 2023
References
- https://github.com/spwpun/pocs
- https://github.com/spwpun/pocs/blob/main/frr-bgpd.md
- FEDORA-2023-14ec79ae02 vendor-advisory
- FEDORA-2023-2cb0f34efe vendor-advisory
- FEDORA-2023-77d00facd0 vendor-advisory
- DSA-5495 vendor-advisory
- [debian-lts-announce] 20230919 [SECURITY] [DLA 3573-1] frr security update mailing-list