All packages
FRRouting FRR 9.0 vulnerabilities
4 known CVE vulnerabilities in FRRouting FRR 9.0, translated and rated.
- CVE-2023-41361Critical
An issue was discovered in FRRouting FRR 9.0, where bgpd/bgp_open.c does not check for an overly large length of the rcv software version.
- CVE-2023-41360Critical
An issue was discovered in FRRouting FRR through 9.0 that allows reading the initial byte of the ORF header in an ahead-of-stream situation.
- CVE-2023-41359Critical
An issue was discovered in FRRouting FRR through 9.0 related to an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c. There is no check for the availability of two bytes during AIGP validation.
- CVE-2023-41358High
An issue was discovered in FRRouting FRR through 9.0, where bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.