Red Hat Security Advisory

RHSA-2024:1152

frr security update

Released 2024-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2023-19790 CVE-2023-38406 · GHSA-8jp5-89m5-6xp3

MEDIUM 44

bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01129 Published 2023-11-06 Fixed CWE-755

TI-2023-25552 CVE-2023-47234 · GHSA-v9pv-vrqw-885r

MEDIUM 43

An issue was discovered in FRRouting FRR through 9.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01095 Published 2023-11-03 Fixed

TI-2023-19791 CVE-2023-38407 · GHSA-38fw-5cvw-p8h6

LOW 35

bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01119 Published 2023-11-06 Fixed

TI-2023-25553 CVE-2023-47235 · GHSA-5682-2jc3-w5j4

LOW 34

An issue was discovered in FRRouting FRR through 9.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00789 Published 2023-11-03 Fixed