Search CVE reports
1 – 10 of 35 results
CVE-2024-55553
Medium priorityIn FRRouting (FRR) before 10.3, it is possible for an attacker to trigger repeated RIB revalidation by sending approximately 500 RPKI updates, potentially leading to prolonged revalidation times and a Denial of Service (DoS) scenario.
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| quagga | Not in release | Not in release | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2024-44070
Medium prioritySome fixes available 4 of 7
An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Fixed | Fixed | Needs evaluation | — | — |
| quagga | Not in release | Not in release | Fixed | Needs evaluation | Needs evaluation |
CVE-2024-34088
Medium priorityIn FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes,...
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Fixed | Fixed | Not affected | — | — |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |
CVE-2024-31951
Medium priorityIn the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs...
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Fixed | Fixed | Not affected | — | — |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |
CVE-2024-31950
Medium priorityIn FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Fixed | Fixed | Not affected | — | — |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |
CVE-2024-31949
Medium priorityIn FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Not affected | Not affected | Not affected | — | — |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |
CVE-2024-31948
Medium priorityIn FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Fixed | Fixed | Fixed | — | — |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |
CVE-2024-27913
Medium priorityospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field.
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Fixed | Fixed | Not affected | Not in release | Not in release |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |
CVE-2023-38407
Medium prioritybgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Fixed | Fixed | Fixed | Ignored | Ignored |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |
CVE-2023-38406
Medium prioritybgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
2 affected packages
frr, quagga
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| frr | Not affected | Fixed | Fixed | Ignored | Ignored |
| quagga | Not in release | Not in release | Not affected | Not affected | Not affected |