security advisorydenial of servicedebian Brief introduction Multiple vulnerbilities were discovered in frr, the FRRouting suite of internet protocols, while processing malformed requests and packets the BGP . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5495-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Aron Xu September 11, 2023 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : frr CVE ID : CVE-2022-36440 CVE-2022-40302 CVE-2022-40318 CVE-2022-43681 CVE-2023-31490 CVE-2023-38802 CVE-2023-41358 Debian Bug : 1035829 1036062 Brief introduction Multiple vulnerbilities were discovered in frr, the FRRouting suite of internet protocols, while processing malformed requests and packets the BGP daemon may have reachable assertions, NULL pointer dereference, out-of-bounds memory access, which may lead to denial of service attack. For the oldstable distribution (bullseye), these problems have been fixed in version 7.5.1-1.1+deb11u2. For the stable distribution (bookworm), these problems have been fixed in version 8.4.4-1.1~deb12u1. We recommend that you upgrade your frr packages. For the detailed security status of frr please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/frr Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu Security Notice for frr highlights several vulnerabilities causing Denial of Service. It is advised to update promptly to enhance system protection.. FRRouting Security Update, Debian DSA-5495-1, Internet Protocols Vulnerability. . Severity: Critical. LinuxSecurity.com Team
Sep 11, 2023 •Critical Debian