RHSA-2024:2156MediumCVSS 7.5

Red Hat Security Advisory: frr security update

Published
April 30, 2024
Last Modified
November 6, 2026

🔗 CVE IDs covered (8)

CVE-2023-31490 →CVE-2023-41358 →CVE-2023-41359 →CVE-2023-41360 →CVE-2023-41909 →CVE-2023-46752 →CVE-2023-46753 →CVE-2023-31489 →

📋 Description

CVE-2023-31489 — frr: incorrect length check in bgp_capability_llgr() can lead do DoS CVE-2023-31490 — frr: missing length check in bgp_attr_psid_sub() can lead do DoS CVE-2023-41358 — frr: processes invalid NLRIs if attribute length is zero CVE-2023-41359 — frr: out of bounds read in bgp_attr_aigp_valid CVE-2023-41360 — frr: ahead-of-stream read of ORF header CVE-2023-41909 — frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c CVE-2023-46752 — frr: mishandled malformed data leading to a crash CVE-2023-46753 — frr: crafted BGP UPDATE message leading to a crash

🎯 Affected products15

  • Red Hat Enterprise Linux AppStream (v. 9)
  • frr-0:8.5.3-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-0:8.5.3-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-0:8.5.3-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-0:8.5.3-4.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-0:8.5.3-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debuginfo-0:8.5.3-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debuginfo-0:8.5.3-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debuginfo-0:8.5.3-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debuginfo-0:8.5.3-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debugsource-0:8.5.3-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debugsource-0:8.5.3-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debugsource-0:8.5.3-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-debugsource-0:8.5.3-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • frr-selinux-0:8.5.3-4.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (14)