Lucene search
OracleLinuxELSA-2024-0130HistoryJan 12, 2024 - 12:00 a.m.
frr security update
2024-01-1200:00:00
linux.oracle.com
9
frr
security update
rhel-15916
rhel-15919
rhel-15869
rhel-15868
bgpd
flowspec
out of bounds read
crash
bgp_update message
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
27.3%
[7.5.1-13.3]
- Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
- Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
- Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
- Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | frr | < 7.5.1-13.el8_9.3 | frr-7.5.1-13.el8_9.3.src.rpm |
| oracle linux | 8 | aarch64 | frr | < 7.5.1-13.el8_9.3 | frr-7.5.1-13.el8_9.3.aarch64.rpm |
| oracle linux | 8 | noarch | frr-selinux | < 7.5.1-13.el8_9.3 | frr-selinux-7.5.1-13.el8_9.3.noarch.rpm |
| oracle linux | 8 | src | frr | < 7.5.1-13.el8_9.3 | frr-7.5.1-13.el8_9.3.src.rpm |
| oracle linux | 8 | x86_64 | frr | < 7.5.1-13.el8_9.3 | frr-7.5.1-13.el8_9.3.x86_64.rpm |
| oracle linux | 8 | noarch | frr-selinux | < 7.5.1-13.el8_9.3 | frr-selinux-7.5.1-13.el8_9.3.noarch.rpm |
Related
nessus
nessus
RHEL 8 : frr (RHSA-2024:0574)
2024-01-30 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2023:4663-1)
2023-12-07 00:00:00
RHEL 8 : frr (RHSA-2024:0130)
2024-01-10 00:00:00
redhat
redhat
(RHSA-2024:0130) Moderate: frr security update
2024-01-10 09:30:22
(RHSA-2024:1152) Moderate: frr security update
2024-03-05 16:29:13
(RHSA-2024:0477) Moderate: frr security update
2024-01-24 14:41:11
oraclelinux
oraclelinux
frr security update
2024-01-26 00:00:00
osv
osv
Moderate: frr security update
2024-01-12 19:57:06
Moderate: frr security update
2024-01-10 00:00:00
Moderate: frr security update
2024-01-25 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2245-1)
2024-07-01 00:00:00
Ubuntu: Security Advisory (USN-6498-1)
2023-11-22 00:00:00
Debian: Security Advisory (DLA-3797-1)
2024-04-29 00:00:00
rocky
rocky
frr security update
2024-01-12 19:57:06
almalinux
almalinux
Moderate: frr security update
2024-01-10 00:00:00
Moderate: frr security update
2024-01-25 00:00:00
ubuntu
ubuntu
FRR vulnerabilities
2023-11-21 00:00:00
FRR vulnerabilities
2024-06-05 00:00:00
redos
redos
ROS-20240617-02
2024-06-17 00:00:00
cvelist
cvelist
debiancve
debiancve
prion
prion
Stack overflow
2023-11-06 06:15:00
Path traversal
2023-11-03 21:15:00
Buffer overflow
2023-11-06 06:15:00
redhatcve
redhatcve
nvd
nvd
cbl_mariner
cbl_mariner
CVE-2023-47235 affecting package frr for versions less than 8.5.3-4
2023-11-22 19:15:31
CVE-2023-47235 affecting package frr for versions less than 9.1-2
2024-05-17 21:38:35
CVE-2023-47234 affecting package frr for versions less than 8.5.3-4
2023-11-22 19:15:31
ubuntucve
ubuntucve
cve
cve
veracode
veracode
Denial Of Service (DoS)
2023-11-06 10:50:21
Denial Of Service (DoS)
2023-11-07 07:05:17
Denial Of Service (DoS)
2023-11-07 08:43:43
vulnrichment
vulnrichment
CVE-2023-38407
2023-11-06 00:00:00
debian
debian
[SECURITY] [DLA 3797-1] frr security update
2024-04-28 06:30:09
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
27.3%
Related for ELSA-2024-0130