[Apollo] Advisories Statistics light light Login


Security Mirrored from RHSA-2024:0130
Issued at: 2024-01-12
Updated at: 2024-01-12


Moderate: frr security update


FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

* ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)

* ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)

* frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)

* frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 x86_64


2248207 2248208 2248526 2248528


CVE-2023-38406 CVE-2023-38407 CVE-2023-47234 CVE-2023-47235

Affected packages

Rocky Linux 8 x86_64 - AppStream

frr-0:7.5.1-13.el8_9.3.src.rpm frr-0:7.5.1-13.el8_9.3.x86_64.rpm frr-debuginfo-0:7.5.1-13.el8_9.3.x86_64.rpm frr-debugsource-0:7.5.1-13.el8_9.3.x86_64.rpm frr-selinux-0:7.5.1-13.el8_9.3.noarch.rpm