PT-2024-6032 · Frrouting+5 · Frrouting+5

Iggy Frankovic · Published 2024-04-07 · Updated 2025-05-01 · CVE-2024-31948

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FRRouting versions through 9.1

Description The issue is related to improper input validation, allowing a remote attacker to cause a denial of service by exploiting the vulnerability. Specifically, an attacker can use a malformed Prefix SID attribute in a BGP UPDATE packet to crash the bgpd daemon.

Recommendations For versions through 9.1, consider disabling the bgpd daemon or restricting its use until a patch is available to prevent potential crashes caused by malformed Prefix SID attributes in BGP UPDATE packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1287

Related Identifiers

BDU:2024-06850

CVE-2024-31948

DLA-3797-1

DLA-3865-1

OPENSUSE-SU-2024:13860-1

OPENSUSE-SU-2024_1453-1

OPENSUSE-SU-2024_1475-1

OPENSUSE-SU-2024_4090-1

SUSE-SU-2024:1453-1

SUSE-SU-2024:1475-1

SUSE-SU-2024:4090-1

SUSE-SU-2024_1475-1

USN-6794-1

USN-6807-1

Affected Products

Debian

Frrouting

Linuxmint

Red Os

Suse

Ubuntu

References · 70

• 🔥 https://github.com/spwpun/CVE-2022-37032 · Exploit
• https://github.com/FRRouting/frr/pull/15628/commits/ba6a8f1a31e1a88df2de69ea46068e8bd9b97138 · Patch
• https://ubuntu.com/security/CVE-2023-38407 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-46753 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4090-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-31490 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-31948 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13860-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-31948 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3797-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6807-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-31950 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-37032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-26128 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6807-1 · Vendor Advisory