Red Hat Security Advisory

RHSA-2023:6434

frr security and bug fix update

Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) frr-8.3.1-11.el9_3, frr-selinux-8.3.1-11.el9_3

TI-2022-16765 CVE-2022-36440 · GHSA-cpmq-crvm-2w5p

LOW 36

A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01624 Published 2023-04-03 Fixed CWE-617

TI-2022-21441 CVE-2022-43681 · GHSA-x7mf-v6gh-vm4g

LOW 33

An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02125 Published 2023-05-03 Fixed CWE-125

TI-2022-19155 CVE-2022-40318 · GHSA-9rqq-99cf-35g5

LOW 33

An issue was discovered in bgpd in FRRouting (FRR) through 8.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01983 Published 2023-05-03 Fixed CWE-125

TI-2022-19139 CVE-2022-40302 · GHSA-j7hm-p94x-q9pw

LOW 33

An issue was discovered in bgpd in FRRouting (FRR) through 8.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01999 Published 2023-05-03 Fixed CWE-125