CVE-2023-47235 affecting package frr for versions less than 8.5.3-4

CVE-2023-47235 affecting package frr for versions less than 8.5.3-4. A patched version of the package is available...

CVE-2023-47234 affecting package frr for versions less than 8.5.3-4

CVE-2023-47234 affecting package frr for versions less than 8.5.3-4. A patched version of the package is available...

Ubuntu: Security Advisory (USN-6498-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4483-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-46752: Fixed denial of service caused by mishandling malformed MPREACHNLRI data bsc1216627. - CVE-2023-46753: Fixed denial of service caused by crafted BGP UPDATE messages bsc1216626...

SUSE-SU-2023:4473-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-46753: Fixed a crash caused from a crafted BGP UPDATE message. bsc1216626 - CVE-2023-46752: Fixed a crash caused from a mishandled malformed MPREACHNLRI data. bsc1216627...

Ubuntu: Security Advisory (USN-6481-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for frr (FEDORA-2023-ce436d56f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : frr (2023-514db5339e)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-514db5339e advisory. New version 8.5.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CBL Mariner 2.0 Security Update: frr (CVE-2023-46753)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46753 advisory. - An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message...

CVE-2023-46753 affecting package frr for versions less than 8.5.3-3

CVE-2023-46753 affecting package frr for versions less than 8.5.3-3. A patched version of the package is available...

CVE-2023-46752 affecting package frr for versions less than 8.5.3-3

CVE-2023-46752 affecting package frr for versions less than 8.5.3-3. A patched version of the package is available...

frr: Reachable assertion in peek_for_as4_capability function

A reachable assertion flaw was found in Frrouting frr-bgpd in the peekforas4capability function. This flaw allows an attacker to maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in a denial of service...

CVE-2023-47234

A flaw was found in frr. A crash can occur when processing a crafted BGP UPDATE message with a MPUNREACHNLRI attribute and additional NLRI data that lacks mandatory path attributes. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red...

CVE-2023-47235

An issue was found in FRRouting FRR, where a crash may occur when processing a malformed BGP UPDATE message with an EOR. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2023-38407

bgpd/bgplabel.c in FRRouting FRR before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing...

AZL-31785 CVE-2023-47235 affecting package frr for versions less than 8.5.3-4

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome...

CVE-2023-47234

FRRouting FRR up to 9.0.1 is affected by CVE-2023-47234: processing a crafted BGP UPDATE containing an MP_UNREACH_NLRI with additional NLRI lacking mandatory path attributes can crash the bgpd process. Public references show multiple distributions listing this as a vulnerability and some advisori...

An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data leading to a crash.

...

AZL-31700 CVE-2023-46752 affecting package frr for versions less than 8.5.3-3

An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MPREACHNLRI data, leading to a crash...

AZL-31728 CVE-2023-46753 affecting package frr for versions less than 8.5.3-3

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute...