Ubuntu: Security Advisory (USN-6323-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS / 23.04 : FRR vulnerability (USN-6323-1)

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6323-1 advisory. Ben Cartwright-Cox discovered that FRR did not handle RFC 7606 attributes properly. A remote attacker could possibly use this to cause denial of service...

AZL-28617 CVE-2023-41360 affecting package frr for versions less than 8.5.3-2

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...

Design/Logic Flaw

An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...

Design/Logic Flaw

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...

CVE-2023-41358

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c processes NLRIs if the attribute length is zero...

CVE-2023-41359

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgpattraigpvalid in bgpd/bgpattr.c because there is no check for the availability of two bytes during AIGP validation...

CVE-2023-41361

An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...

CVE-2023-41358

FRR CVE-2023-41358 affects the BGP daemon (bgpd) where bgp_packet.c processes NLRIs when the attribute length is zero, enabling potential DoS by malformed BGP data. Affected product: FRRouting FRR. Root cause: zero-length attribute handling in BGP NLRI processing. Impact: denial of service (crash...

CVE-2023-41361

An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...

CVE-2023-41359

CVE-2023-41359 is a FRRouting FRR issue (through 9.0) with an out-of-bounds read in bgp_attr_aigp_valid due to missing check for two bytes during AIGP validation in bgpd/bgp_attr.c. Connected advisories (Miracle Linux AXSA-2024-7889:04, TencentOS/TENABLE plugins, Oracle Linux RHSA, etc.) enumerat...

CVE-2023-38802

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...

CVE-2023-41361

CVE-2023-41361 affects FRRouting FRR 9.0; the bgpd/bgp_open.c path does not check for an overly large rcv software version length, enabling a potential issue. The NVD/NIST entry confirms a critical impact (C:H/I:H/A:H). Debian/DEB LTS advisories indicate a fixed package is available in Debian; en...

CVE-2023-41361

An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...

Denial Of Service (DoS)

frr is vulnerable to Denial of Service DoS. The vulnerability exists due to an out-of-bounds read which allows an attacker to cause an application crash...

Ubuntu: Security Advisory (USN-6240-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6240-1: FRR vulnerability

It was discovered that FRR incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service...

Denial Of Service (DoS)

frr is vulnerable to Denial of Service DoS attacks. By crafting a BGP OPEN message with an option of type 0xff, an attacker may cause a denial of service due to inconsistent boundary checks that do not account for reading 3 bytes instead of 2 in this 0xff case...

Denial Of Service (DoS)

frr is vulnerable to Denial of Service DoS attacks. By crafting a BGP OPEN message with an option of type 0xff, an attacker is able to cause a denial of service conditions due to inconsistent boundary checks that do not account for reading 3 bytes instead of 2 in this 0xff case...

Denial Of Service (DoS)

frr is vulnerable to Denial of Service DoS. This vulnerability is found within the 'bgpcapabilityllgr' function and allows a malicious attacker to remotely cause a denial of service...