Description
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | frr +1 | 8.5.3-4.el9 | RHSA-2024:2156 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | frr +1 | 8.5.3-4.el9 | ALSA-2024:2156 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | frr | 8.5.3-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | frr +1 | 8.5.3-4.el9 | ELSA-2024-2156 |
Advisories 4
- ALSA-2024:2156 Moderate: frr security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:2156 Red Hat Security Advisory: frr security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- WID-SEC-2023-2196 FRRouting Project FRRouting: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2024
- ELSA-2024-2156 Moderate: frr security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 2, 2024
References
- https://github.com/FRRouting/frr/pull/14232
- FEDORA-2023-514db5339e vendor-advisory
- FEDORA-2023-ce436d56f8 vendor-advisory
- FEDORA-2023-61abba57d8 vendor-advisory