PT-2023-9205 · Frrouting+9 · Frrouting+9

Matteo Memelli · Published 2023-09-04 · Updated 2024-11-28 · CVE-2023-41909

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FRRouting versions through 9.0

Description The issue is related to the processing of malformed requests without attributes in the bgpd/bgp flowspec.c file of FRRouting, a software for implementing network routing on Unix-like systems. This can lead to a NULL pointer dereference. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For versions through 9.0, consider disabling the bgp nlri parse flowspec function in bgpd/bgp flowspec.c as a temporary workaround until a patch is available. Restrict access to the bgpd/bgp flowspec.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:2156

ALSA-2024:2981

ALT-PU-2023-7098

ALT-PU-2024-2047

BDU:2024-04615

CESA-2024_2981

CVE-2023-41909

DLA-3573-1

DLA-3865-1

INFSA-2024_2156

INFSA-2024_2981

OPENSUSE-SU-2023_3709-1

OPENSUSE-SU-2023_3762-1

OPENSUSE-SU-2024:13238-1

OPENSUSE-SU-2024_4090-1

RHSA-2024:2156

RHSA-2024:2981

RHSA-2024_2156

RHSA-2024_2981

SUSE-SU-2023:3709-1

SUSE-SU-2023:3762-1

SUSE-SU-2024:4090-1

USN-6436-1

Affected Products

Alt Linux

Almalinux

Centos

Frrouting

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 84

• https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8 · Patch
• https://errata.almalinux.org/8/ALSA-2024-2981.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:2156 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-41909 · Security Note
• https://ubuntu.com/security/notices/USN-6436-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4090-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13238-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2156.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-41909 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2156.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3709-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41909 · Security Note
• https://errata.rockylinux.org/RLSA-2024:2981 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41909 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-41358 · Vendor Advisory