USN-6679-1: FRR vulnerability
Published Mar 6, 2024
·Updated
It was discovered that FRR incorrectly handled certain malformed OSPF LSA packets. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/frr<8.4.4-1.1ubuntu1.3
8.4.4-1.1ubuntu1.3
Ubuntu Ubuntu=23.10
All of the following
ubuntu/frr<8.1-1ubuntu1.9
8.1-1ubuntu1.9
Ubuntu Ubuntu=22.04
Event History
Mar 6, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6679-1?
The severity of USN-6679-1 is categorized as a denial of service vulnerability.
2
How do I fix USN-6679-1?
To fix USN-6679-1, upgrade the FRR package to version 8.4.4-1.1ubuntu1.3 or 8.1-1ubuntu1.9 depending on your Ubuntu version.
3
What software is affected by USN-6679-1?
USN-6679-1 affects the FRR package on Ubuntu versions 22.04 and 23.10.
4
Can USN-6679-1 be exploited remotely?
Yes, USN-6679-1 can be exploited remotely through malformed OSPF LSA packets.
5
What impact does USN-6679-1 have on my system?
USN-6679-1 could lead to a crash of the FRR service, resulting in potential denial of service.