PT-2023-19684 · Arista · Arista Mos

Name of the Vulnerable Software and Affected Versions: Arista MOS affected versions not specified Description: The configuration of a BGP password on affected platforms running Arista MOS causes the password to be logged in clear text. This can be revealed in local logs or remote logging servers ...

Security Advisory 0090

Security Advisory 0090 . CSAF PDF Date: December 5, 2023 Revision | Date | Changes ---|---|--- 1.0 | December 5, 2023 | Initial release The CVE-ID tracking this issue: CVE-2023-24547 CVSSv3.1 Base Score: 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H Common Weakness Enumeration: CWE-212: Improp...

Ubuntu: Security Advisory (USN-6498-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6498-1: FRR vulnerabilities

It was discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service...

CVE-2023-45886

The BGP daemon bgpd in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute...

Code injection

The BGP daemon bgpd in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute...

SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2023:4483-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4483-1 advisory. - CVE-2023-46752: Fixed denial of service caused by mishandling malformed MPREACHNLRI data bsc1216627. -...

CVE-2023-45886

The BGP daemon bgpd in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute...

CVE-2023-45886

The CVE-2023-45886 issue affects the BGP daemon (bgpd) in IP Infusion ZebOS up to version 7.10.6. It allows remote attackers to cause a DoS by sending crafted BGP UPDATE messages with a malformed attribute. Public sources (Red Hat advisory, CERT VU, and F5/K000137315) corroborate the vulnerabilit...

SUSE-SU-2023:4473-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-46753: Fixed a crash caused from a crafted BGP UPDATE message. bsc1216626 - CVE-2023-46752: Fixed a crash caused from a mishandled malformed MPREACHNLRI data. bsc1216627...

SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2023:4473-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4473-1 advisory. - An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MPREACHNLRI data, leading to a crash. CVE-2023-46752 - An issue was...

Ubuntu: Security Advisory (USN-6482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : frr (ELSA-2023-6434)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6434 advisory. 8.3.1-11 - Resolves: RHEL-2263 - bgpd: Do not explicitly print MAXTTL value for ebgp-multihop vty output 8.3.1-10 - Related: 2216912 - adding sysadmin ...

USN-6482-1: Quagga vulnerabilities

It was discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service...

USN-6482-1 quagga vulnerabilities

It was discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service...

Ubuntu 22.04 LTS / 23.04 / 23.10 : FRR vulnerabilities (USN-6481-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6481-1 advisory. It was discovered that FRR incorrectly handled certain malformed NLRI data. A remote attacker could possibly use this issue to cause FRR ...

Ubuntu 20.04 LTS : Quagga vulnerabilities (USN-6482-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6482-1 advisory. It was discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulti...

Fedora 37 : frr (2023-ce436d56f8)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ce436d56f8 advisory. New version 8.5.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 38 : frr (2023-61abba57d8)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-61abba57d8 advisory. New version 8.5.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 39 : frr (2023-514db5339e)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-514db5339e advisory. New version 8.5.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...