Moderate: frr security update

2024-01-1000:00:00

errata.almalinux.org

frrouting tcp/ip bgp ospfv2 ospfv3 isis rip ripng pim nhrp pbr eigrp bfd flowspec overflow out of bounds read mp_unreach_nlri eor cve unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.5%

JSON

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)
ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)
frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)
frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchfrr-selinux< 7.5.1-13.el8_9.3.alma.1frr-selinux-7.5.1-13.el8_9.3.alma.1.noarch.rpm
almalinux8aarch64frr< 7.5.1-13.el8_9.3.alma.1frr-7.5.1-13.el8_9.3.alma.1.aarch64.rpm
almalinux8x86_64frr< 7.5.1-13.el8_9.3.alma.1frr-7.5.1-13.el8_9.3.alma.1.x86_64.rpm
almalinux8ppc64lefrr< 7.5.1-13.el8_9.3.alma.1frr-7.5.1-13.el8_9.3.alma.1.ppc64le.rpm
almalinux8s390xfrr< 7.5.1-13.el8_9.3.alma.1frr-7.5.1-13.el8_9.3.alma.1.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	frr-selinux	< 7.5.1-13.el8_9.3.alma.1	frr-selinux-7.5.1-13.el8_9.3.alma.1.noarch.rpm
almalinux	8	aarch64	frr	< 7.5.1-13.el8_9.3.alma.1	frr-7.5.1-13.el8_9.3.alma.1.aarch64.rpm
almalinux	8	x86_64	frr	< 7.5.1-13.el8_9.3.alma.1	frr-7.5.1-13.el8_9.3.alma.1.x86_64.rpm
almalinux	8	ppc64le	frr	< 7.5.1-13.el8_9.3.alma.1	frr-7.5.1-13.el8_9.3.alma.1.ppc64le.rpm
almalinux	8	s390x	frr	< 7.5.1-13.el8_9.3.alma.1	frr-7.5.1-13.el8_9.3.alma.1.s390x.rpm