Lucene search
RedHatRHSA-2024:1152HistoryMar 05, 2024 - 4:29 p.m.
(RHSA-2024:1152) Moderate: frr security update
2024-03-0516:29:13
access.redhat.com
6
frrouting
bgp
ospf
isis
rip
pim
eigrp
flowspec overflow
out of bounds read
bgp update message
cvss score
security fix.
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.
Security Fix(es):
-
ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)
-
ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)
-
frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)
-
frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | aarch64 | frr-debuginfo | < 8.0-5.el9_0.3 | frr-debuginfo-8.0-5.el9_0.3.aarch64.rpm |
| RedHat | 9 | aarch64 | frr | < 8.0-5.el9_0.3 | frr-8.0-5.el9_0.3.aarch64.rpm |
| RedHat | 9 | s390x | frr-debugsource | < 8.0-5.el9_0.3 | frr-debugsource-8.0-5.el9_0.3.s390x.rpm |
| RedHat | 9 | x86_64 | frr-debuginfo | < 8.0-5.el9_0.3 | frr-debuginfo-8.0-5.el9_0.3.x86_64.rpm |
| RedHat | 9 | s390x | frr | < 8.0-5.el9_0.3 | frr-8.0-5.el9_0.3.s390x.rpm |
| RedHat | 9 | x86_64 | frr-debugsource | < 8.0-5.el9_0.3 | frr-debugsource-8.0-5.el9_0.3.x86_64.rpm |
| RedHat | 9 | ppc64le | frr | < 8.0-5.el9_0.3 | frr-8.0-5.el9_0.3.ppc64le.rpm |
| RedHat | 9 | ppc64le | frr-debuginfo | < 8.0-5.el9_0.3 | frr-debuginfo-8.0-5.el9_0.3.ppc64le.rpm |
| RedHat | 9 | ppc64le | frr-debugsource | < 8.0-5.el9_0.3 | frr-debugsource-8.0-5.el9_0.3.ppc64le.rpm |
| RedHat | 9 | aarch64 | frr-debugsource | < 8.0-5.el9_0.3 | frr-debugsource-8.0-5.el9_0.3.aarch64.rpm |
Related
nessus
nessus
RHEL 8 : frr (RHSA-2024:0574)
2024-01-30 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2023:4663-1)
2023-12-07 00:00:00
RHEL 8 : frr (RHSA-2024:0130)
2024-01-10 00:00:00
redhat
redhat
(RHSA-2024:0130) Moderate: frr security update
2024-01-10 09:30:22
(RHSA-2024:0477) Moderate: frr security update
2024-01-24 14:41:11
(RHSA-2024:0574) Moderate: frr security update
2024-01-30 12:53:19
oraclelinux
oraclelinux
frr security update
2024-01-26 00:00:00
frr security update
2024-01-12 00:00:00
osv
osv
Moderate: frr security update
2024-01-12 19:57:06
Moderate: frr security update
2024-01-25 00:00:00
Moderate: frr security update
2024-01-10 00:00:00
rocky
rocky
frr security update
2024-01-12 19:57:06
almalinux
almalinux
Moderate: frr security update
2024-01-10 00:00:00
Moderate: frr security update
2024-01-25 00:00:00
ubuntu
ubuntu
FRR vulnerabilities
2023-11-21 00:00:00
FRR vulnerabilities
2024-06-05 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6498-1)
2023-11-22 00:00:00
Debian: Security Advisory (DLA-3797-1)
2024-04-29 00:00:00
Ubuntu: Security Advisory (USN-6807-1)
2024-06-06 00:00:00
redos
redos
ROS-20240617-02
2024-06-17 00:00:00
cvelist
cvelist
debiancve
debiancve
redhatcve
redhatcve
prion
prion
Stack overflow
2023-11-06 06:15:00
Design/Logic Flaw
2023-11-03 21:15:00
Path traversal
2023-11-03 21:15:00
nvd
nvd
ubuntucve
ubuntucve
cbl_mariner
cbl_mariner
CVE-2023-47235 affecting package frr for versions less than 8.5.3-4
2023-11-22 19:15:31
CVE-2023-47235 affecting package frr for versions less than 9.1-2
2024-05-17 21:38:35
CVE-2023-47234 affecting package frr for versions less than 9.1-2
2024-05-17 21:38:35
veracode
veracode
Denial Of Service (DoS)
2023-11-07 08:43:43
Denial Of Service (DoS)
2023-11-07 07:05:17
Denial Of Service (DoS)
2023-11-06 10:50:21
cve
cve
vulnrichment
vulnrichment
CVE-2023-38407
2023-11-06 00:00:00
debian
debian
[SECURITY] [DLA 3797-1] frr security update
2024-04-28 06:30:09