Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c.
CPE | Name | Operator | Version |
---|---|---|---|
frr | eq | base_8.0 | |
frr | eq | base_7.5 | |
frr | eq | frr-7.4-de | |
frr | eq | frr-5.1-de | |
frr | eq | frr-7.2-de | |
frr | eq | base_7.6 | |
frr | eq | frr-7.5-de | |
frr | eq | reindent-3.0-after | |
frr | eq | frr-2.0-rc2 | |
frr | eq | reindent-master-before |
github.com/FRRouting/frr/issues/10505
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MIEQNIWUSBQTFR65HM2LLIB7PH27CZUZ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTYSAL4QCE4XWMMBKUB7LSLPAFLWUML4/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XUCZR6RYQVZ35BFUV7OLIUEHZW2433I2/