Most recent entries from all

ALSA-2024:0130 — Moderate: frr security update

Affected: AlmaLinux:8: frr, AlmaLinux:8: frr-selinux

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

* ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406) * ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407) * frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234) * frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-04616

EUVD-2026-258829

fkie_cve-2023-38407

bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.

GHSA-38fw-5cvw-p8h6

bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.

gsd-2023-38407

openSUSE-SU-2024:13487-1 — frr-8.4-8.1 on GA media

frr-8.4-8.1 on GA media

RHSA-2024:0574 — Red Hat Security Advisory: frr security update

ffr: Flowspec overflow in bgpd/bgp_flowspec.c ffr: Out of bounds read in bgpd/bgp_label.c frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message frr: crash from malformed EOR-containing BGP UPDATE message

SUSE-SU-2023:4663-1 — Security update for frr

Security update for frr

UBUNTU-CVE-2023-38407

Affected: Ubuntu:Pro:20.04:LTS: frr, Ubuntu:22.04:LTS: frr, Ubuntu:24.04:LTS: frr

bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.

WID-SEC-W-2023-2822 — FRRouting Project FRRouting: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in FRRouting Project FRRouting ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.