frr bug fix and enhancement update

An update is available for frr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...

Ubuntu: Security Advisory (USN-5685-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Use-After-Free

frr is vulnerable to use-after-free. The vulnerability exists in multiple functions of bgppacket.c due to a race condition. which could allow an attacker to execute arbitrary codes and access the sensitive information by sending malicious BGP packets...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

CVE-2022-37032 : FRRouting (FRR) before 8.4 has an out-of-bounds read in the BGP daemon, specifically in bgp_capability_msg_parse (bgpd/bgp_packet.c), which may trigger a segmentation fault and DoS. Affected product: FRR’s BGP daemon; impact is denial of service due to memory access. Exploitation...

SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2022:3246-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3246-1 advisory. - CVE-2022-37032: Fixed out-of-bounds read in the BGP daemon that may lead to information disclosure or denial of...

SUSE: Security Advisory (SUSE-SU-2022:3246-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for frr (SUSE-SU-2022:3246-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:3246-1 Security update for frr

This update for frr fixes the following issues: - CVE-2022-37032: Fixed out-of-bounds read in the BGP daemon that may lead to information disclosure or denial of service bsc1202023. - CVE-2019-25074: Fixed a memory leak in the IS-IS daemon that may lead to server memory exhaustion bsc1202022...

CVE-2022-37035

FRR's bgpd contains a use-after-free condition in bgp_notify_send_with_data() and bgp_process_packet() (bgp_packet.c) due to a race, allowing possible Remote Code Execution or Information Disclosure via crafted BGP packets (no user interaction). Affected: FRRouting (FRR) v8.3 and earlier; ATT&CK ...

new packages: frr

An update is available for frr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

frr bug fix and enhancement update

An update is available for frr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

Buffer Overflow

frr is vulnerable to buffer overflow. The vulnerability exists due to a wrong check on the input packet length in the babelpacketexamin function in babeld/message.c...

Buffer Overflow

frr is vulnerable to buffer overflow. The vulnerability exists due to a missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...

Buffer Overflow

frr is vulnerable to Buffer overflow. The vulnerability exists due to the use of strdup with a non-zero-terminated binary string in isisnbnotifications.c...

Buffer Overflow

frr is vulnerable to Buffer overflow. The vulnerability exists due to a wrong checks on the subtlv length in the functions, parsehellosubtlv, parseihusubtlv, and parseupdatesubtlv in babeld/message.c...

openSUSE: Security Advisory for frr (openSUSE-SU-2022:0901-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:0901-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2022:0901-1 Security update for frr

This update for frr fixes the following issues: - CVE-2022-26125, CVE-2022-26126: Fixed buffer overflows in unpacktlvroutercap bsc1196505, bsc1196506. - CVE-2022-26127: Fixed heap buffer overflow in babelpacketexamin bsc1196503. - CVE-2022-26128: Fixed buffer overflows in babelpacketexamin...

SUSE-SU-2022:0901-1 Security update for frr

This update for frr fixes the following issues: - CVE-2022-26125, CVE-2022-26126: Fixed buffer overflows in unpacktlvroutercap bsc1196505, bsc1196506. - CVE-2022-26127: Fixed heap buffer overflow in babelpacketexamin bsc1196503. - CVE-2022-26128: Fixed buffer overflows in babelpacketexamin...