USN-6436-1: FRR vulnerabilities
It was discovered that the FRR did not properly check the attribute length in NRLI. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-41358) It was discovered that the FRR did not properly manage memory when reading initial bytes of ORF header. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-41360) It was discovered that FRR did not properly validate the attributes in the BGP FlowSpec functionality. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-41909)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for USN-6436-1?
The vulnerability ID for USN-6436-1 is CVE-2023-41358.
What is the severity of CVE-2023-41358?
The severity of CVE-2023-41358 is not mentioned in the provided information. Please refer to the official security advisory for more details.
How can a remote attacker exploit CVE-2023-41358?
A remote attacker can exploit CVE-2023-41358 by using the FRR's improper attribute length check in NRLI to cause a denial of service.
What software is affected by USN-6436-1?
The FRR package versions 8.4.2-1ubuntu1.4, 8.1-1ubuntu1.6, and 7.2.1-1ubuntu0.2+esm1 are affected by USN-6436-1.
How can I remediate the FRR vulnerabilities?
To remediate the FRR vulnerabilities, update your FRR package to the recommended versions provided by the vendor.