AZL-34692 CVE-2023-46752 affecting package frr for versions less than 9.1-2

An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MPREACHNLRI data, leading to a crash...

CVE-2023-46752

The CVE-2023-46752 entry applies to FRRouting FRR, where a malformed MP_REACH_NLRI data handling path can cause the daemon to crash (vulnerable through FRR 9.0.1). Public advisories from multiple vendors list this issue among FRR-related flaws and provide fixes in newer FRR releases. Remediation ...

CVE-2023-46753

FRRouting FRR

Ubuntu: Security Advisory (USN-6436-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : frr (RHSA-2023:5464)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5464 advisory. FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and...

RHEL 9 : frr (RHSA-2023:5457)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:5457 advisory. FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and...

RHEL 8 : frr (RHSA-2023:5465)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5465 advisory. FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and...

CBL Mariner 2.0 Security Update: frr (CVE-2023-41358)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-41358 advisory. - An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c processes NLRIs if the attribute length ...

CBL Mariner 2.0 Security Update: frr (CVE-2023-38802)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38802 advisory. - FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service vi...

CBL Mariner 2.0 Security Update: frr (CVE-2023-41360)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-41360 advisory. - An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF...

CBL Mariner 2.0 Security Update: frr (CVE-2023-41359)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-41359 advisory. - An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgpattraigpvalid in...

CVE-2023-41360 affecting package frr for versions less than 8.5.3-2

CVE-2023-41360 affecting package frr for versions less than 8.5.3-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-38802 affecting package frr for versions less than 8.5.3-2

CVE-2023-38802 affecting package frr for versions less than 8.5.3-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-41359 affecting package frr for versions less than 8.5.3-2

CVE-2023-41359 affecting package frr for versions less than 8.5.3-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-41358 affecting package frr for versions less than 8.5.3-2

CVE-2023-41358 affecting package frr for versions less than 8.5.3-2. An upgraded version of the package is available that resolves this issue...

SUSE: Security Advisory (SUSE-SU-2023:3762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3762-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling when processing BGP attributes. bsc1213284 - CVE-2023-41358: Fixed a possible crash when processing NLRIs with an attribute length of zero. bsc1214735 - CVE-2023-41909: Fixed NULL pointer dereference due t...

SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2023:3709-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3709-1 advisory. - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed crash in...

SUSE-SU-2023:3709-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed crash in bgpd/bgppacket.c bsc1214735. - CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgppacket.c bsc1214739. - CVE-2023-3748: Fixed inifini...

Oracle Linux 8 : frr (ELSA-2023-5219)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5219 advisory. 7.5.1-7.0.1.2 - Fix BFD crash in FRR running in MetalLB BZ2231829 - Fix for CVE-2023-38802 Tenable has extracted the preceding description block directly from t...