Read the docs
TI-2023-20107 Aliases CVE-2023-38802GHSA-xh4f-v933-c556

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause…

Priority HIGH 72CWE-354Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01779 78th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 7 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*7.5.1 – 9.0VulnerableFRRouting
cpe:2.3:o:pica8:picos:4.3.3.2:*:*:*:*:*:*:*4.3.3.2VulnerablePica8
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*12.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*37VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*39VulnerableFedoraproject
  • cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:* Versions 7.5.1 – 9.0 Vulnerable ·FRRouting
  • cpe:2.3:o:pica8:picos:4.3.3.2:*:*:*:*:*:*:* Versions 4.3.3.2 Vulnerable ·Pica8
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject

Remediation

Red Hat 7 advisories

  • RHSA-2023:5457 Released 2023-10-05 · Red Hat rating Important
    frr security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) frr-8.0-5.el9_0.1
  • RHSA-2023:5465 Released 2023-10-05 · Red Hat rating Important
    frr security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) frr-7.0-5.el8_2.1, frr-contrib-7.0-5.el8_2.1
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) frr-7.0-5.el8_2.1, frr-contrib-7.0-5.el8_2.1
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) frr-7.0-5.el8_2.1, frr-contrib-7.0-5.el8_2.1
  • RHSA-2023:5464 Released 2023-10-05 · Red Hat rating Important
    frr security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) frr-7.0-5.el8_1.1, frr-contrib-7.0-5.el8_1.1
Show 4 more Red Hat advisories
  • RHSA-2023:5219 Released 2023-09-19 · Red Hat rating Important
    frr security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) frr-7.5.1-7.el8_8.2, frr-selinux-7.5.1-7.el8_8.2
  • RHSA-2023:5195 Released 2023-09-18 · Red Hat rating Important
    frr security and bug fix update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) frr-7.5-11.el8_6.2
  • RHSA-2023:5194 Released 2023-09-18 · Red Hat rating Important
    frr security update
    • Red Hat Enterprise Linux AppStream (v. 9) frr-8.3.1-5.el9_2.2, frr-selinux-8.3.1-5.el9_2.2
  • RHSA-2023:5196 Released 2023-09-18 · Red Hat rating Important
    frr security and bug fix update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) frr-7.5-4.el8_4.4
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) frr-7.5-4.el8_4.4
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) frr-7.5-4.el8_4.4

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:5219
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:5194
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2023:5465
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:5196
Red Hat Enterprise Linux AppStream E4S (v. 8.1)Fixed RHSA-2023:5464
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2023:5465
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:5196
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:5195
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:5457
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2023:5465
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:5196

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-38802
  2. 2026-10-03 Alias added: GHSA-xh4f-v933-c556

References

Exploit 1

Advisory 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences