Red Hat Security AdvisoryRHSA-2023:5465
frr security update
Released 2023-10-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) frr-7.0-5.el8_2.1, frr-contrib-7.0-5.el8_2.1
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) frr-7.0-5.el8_2.1, frr-contrib-7.0-5.el8_2.1
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) frr-7.0-5.el8_2.1, frr-contrib-7.0-5.el8_2.1
Fixes 1 record
Priority HIGH 72
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01779 · Published 2023-08-29 · Fixed CWE-354
