PT-2023-9202 · Unknown+4 · Frrouting Frr+4

Iggy Frankovic · Published 2023-08-28 · Updated 2024-07-18 · CVE-2023-41359

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions FRRouting FRR versions through 9.0

Description An issue was discovered in FRRouting FRR, where there is an out-of-bounds read in bgp attr aigp valid in bgpd/bgp attr.c because there is no check for the availability of two bytes during AIGP validation. This could allow a remote attacker to cause a denial of service.

Recommendations For FRRouting FRR versions through 9.0, consider disabling the bgp attr aigp valid function until a patch is available to prevent potential exploitation. Restrict access to the bgpd/bgp attr.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2024:2156

ALT-PU-2023-7098

ALT-PU-2024-2047

AZL-28615

BDU:2024-04612

CVE-2023-41359

INFSA-2024_2156

RHSA-2024:2156

RHSA-2024_2156

Affected Products

Alt Linux

Almalinux

Frrouting Frr

Red Hat

Red Os

References · 41

• https://github.com/FRRouting/frr/pull/14232 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:2156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41359 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2156.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04612 · Security Note
• https://osv.dev/vulnerability/AZL-28615 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2156.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41359 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4 · Vendor Advisory
• https://github.com/FRRouting/frr/commit/f96201e104892e18493f24cf67bb713678e8237b · Note
• https://github.com/FRRouting/frr/pull/14268 · Note
• https://github.com/FRRouting/frr/commit/97a52c82a569f4a2ba792fbd734f5e635a057e6f · Note
• https://github.com/FRRouting/frr/commit/460ee930d6dbce6e96ecbfcd568a291f31bae24e · Note