Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : FRR vulnerabilities (USN-8376-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8376-1 advisory. It was discovered that FRR incorrectly handled certain OSPF Traffic Engineering and Segment Routing TLVs. An attacker cou...

MiracleLinux 9 : frr-8.3.1-11.el9_3.2.ML.1 (AXSA:2024-7478:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7478:02 advisory. ffr: Flowspec overflow in bgpd/bgpflowspec.c CVE-2023-38406 ffr: Out of bounds read in bgpd/bgplabel.c CVE-2023-38407 frr: crash from specially...

MiracleLinux 9 : frr-8.5.3-4.el9 (AXSA:2024-7889:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7889:04 advisory. frr: incorrect length check in bgpcapabilityllgr can lead do DoS CVE-2023-31489 frr: missing length check in bgpattrpsidsub can lead do DoS...

SUSE-SU-2023:4663-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-47235: Fixed denial of service caused by malformed BGP UPDATE message with an EOR is processed bsc1216896. - CVE-2023-47234: Fixed denial of service caused by crafted BGP UPDATE message with a MPUNREACHNLRI attribute bsc1216897. -...

SUSE-SU-2023:3709-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed crash in bgpd/bgppacket.c bsc1214735. - CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgppacket.c bsc1214739. - CVE-2023-3748: Fixed inifini...

SUSE-SU-2022:4130-1 Security update for frr

This update for frr fixes the following issues: - CVE-2022-37035: Fixed a possible use-after-free due to a race condition related to bgpnotifysendwithdata and bgpprocesspacket bsc1202085. - CVE-2022-42917: Fixed a privilege escalation from frr to root in frr config creation bsc1204124...

SUSE-SU-2022:0901-1 Security update for frr

This update for frr fixes the following issues: - CVE-2022-26125, CVE-2022-26126: Fixed buffer overflows in unpacktlvroutercap bsc1196505, bsc1196506. - CVE-2022-26127: Fixed heap buffer overflow in babelpacketexamin bsc1196503. - CVE-2022-26128: Fixed buffer overflows in babelpacketexamin...