DSA-5362: -1 frr -- security update

Published Feb 24, 2023

Updated

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c.

Affected Software

2 affected components

debian/frr

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade frr to a version that resolves this vulnerability.
Fixed in 8.4Patch DSA-5362-1

Event History

Feb 24, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-37032

Frequently Asked Questions

Which deployments are exposed to this issue?

Deployments using the BGP daemon in FRRouting FRR versions before 8.4 are affected. The vulnerable parsing path is in bgpd, so systems not running the BGP daemon are not indicated as exposed by the available information.

What does an attacker need to do to trigger the issue?

The issue is triggered while the BGP daemon parses a capability message. The available information does not specify whether authentication, a valid BGP session, or other network access conditions are required.

What is the practical impact of successful exploitation?

The out-of-bounds read can cause a segmentation fault in the BGP daemon, resulting in denial of service.

DSA-5362: -1 frr -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to trigger the issue?

What is the practical impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to trigger the issue?

What is the practical impact of successful exploitation?