FRR could be made to close sessions if it received speacially crafted network traffic.. ========================================================================== Ubuntu Security Notice USN-6323-1 August 31, 2023 frr vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.04 LTS Summary: FRR could be made to close sessions if it received speacially crafted network traffic. Software Description: - frr: FRRouting suite of internet protocols Details: Ben Cartwright-Cox discovered that FRR did not handle RFC 7606 attributes properly. A remote attacker could possibly use this to cause denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: frr 8.4.2-1ubuntu1.3 Ubuntu 22.04 LTS: frr 8.1-1ubuntu1.5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6323-1 CVE-2023-31490 Package Information: https://launchpad.net/ubuntu/+source/frr/8.4.2-1ubuntu1.3 https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.5 . A vulnerability in FRR may result in unexpected session termination triggered by maliciously designed packets. It is suggested to apply updates for Ubuntu platforms.. FRRouting, Denial of Service, Network Issue, Ubuntu Patch. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.