SUSE-SU-2023:3709-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed crash in bgpd/bgppacket.c bsc1214735. - CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgppacket.c bsc1214739. - CVE-2023-3748: Fixed inifini...

[SECURITY] [DLA 3573-1] frr security update

Debian LTS Advisory DLA-3573-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 19, 2023 https://wiki.debian.org/LTS Package : frr Version : 7.5.1-1.1+deb10u1 CVE ID : CVE-2022-36440 CVE-2022-40302 CVE-2022-40318 CVE-2022-43681 CVE-2023-31490 CVE-2023-388...

SUSE CVE-2023-41360

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...

CVE-2023-41360

creationtimestamp| type| source ---|---|--- 2023-08-29 07:17:17+00:00| seen| https://t.me/cibsecurity/69344...

AZL-28617 CVE-2023-41360 affecting package frr for versions less than 8.5.3-2

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...

CVE-2023-41360

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...

CVE-2023-41360

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...

CVE-2023-41360

CVE-2023-41360 – FRRouting FRR ahead-of-stream read of ORF header . The connected Nessus advisory for MiracleLinux 9 (FRR 8.x line) documents an issue in bgpd/bgp_packet.c where the initial byte of the ORF header can be read in an ahead-of-stream situation, affecting FRR releases up to 9.0. The C...

CVE-2023-41360

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...

CVE-2021-41360

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2021-41360 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2021-41360

CVE-2021-41360 corresponds to a remote code execution vulnerability in the Windows HEVC Video Extensions (HEVC from Device Manufacturer) app. Affected component: Windows HEVC Video Extensions/Codecs Library; root cause described as a vulnerability in the HEVC Video Extensions that allows remote c...