Known vulnerabilities in frr (Red Hat package)
Vendor:
Red Hat Inc.
Software:
frr (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:frr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
19
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.5.3-15.el9_8.1
7.5.1-25.el8_10
7.5.1-24.el8_10
7.5.1-22.el8
8.5.3-4.el9
8.0-5.el9_0.3
8.3.1-5.el9_2.4
7.5-11.el8_6.7
7.5.1-7.el8_8.5
7.5.1-13.el8_9.3
8.3.1-11.el9_3
8.0-5.el9_0.1
7.0-5.el8_1.1
7.0-5.el8_2.1
7.5.1-7.el8_8.2
8.3.1-5.el9_2.2
7.5-11.el8_6.2
7.5-4.el8_4.4
7.5.1-7.el8
8.3.1-5.el9
7.0-10.el8
8.2.2-4.el9
Vulnerabilities (19)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82902 - Improper input validation CVE-2023-46753 |
CWE-20 | Medium | 7.5.1-22.el8, 8.5.3-4.el9 | 07.11.2023 |
SB20231107126 SB2023111547 SB2023111548 and 9 more |
||
| #VU82901 - Improper input validation CVE-2023-46752 |
CWE-20 | Medium | 7.5.1-22.el8, 8.5.3-4.el9 | 07.11.2023 |
SB20231107126 SB2023111548 SB2023111715 and 8 more |
||
| #VU82900 - Improper input validation CVE-2023-47235 |
CWE-20 | Medium | 7.5.1-7.el8_8.5, 7.5.1-13.el8_9.3, 7.5-11.el8_6.7, 8.0-5.el9_0.3, 8.3.1-5.el9_2.4 | 07.11.2023 |
SB20231107126 SB2023112144 SB2023120658 and 10 more |
||
| #VU82899 - Improper input validation CVE-2023-47234 |
CWE-20 | Medium | 7.5.1-7.el8_8.5, 7.5.1-13.el8_9.3, 7.5-11.el8_6.7, 8.0-5.el9_0.3, 8.3.1-5.el9_2.4 | 07.11.2023 |
SB20231107126 SB2023112144 SB2023120658 and 10 more |
||
| #VU82898 - Out-of-bounds read CVE-2023-38407 |
CWE-125 | Medium | 7.5.1-7.el8_8.5, 7.5.1-13.el8_9.3, 7.5-11.el8_6.7, 8.0-5.el9_0.3, 8.3.1-5.el9_2.4 | 07.11.2023 |
SB20231107125 SB2023112144 SB2023120658 and 9 more |
||
| #VU82897 - Improper input validation CVE-2023-38406 |
CWE-20 | Medium | 7.5.1-7.el8_8.5, 7.5.1-13.el8_9.3, 7.5-11.el8_6.7, 8.0-5.el9_0.3, 8.3.1-5.el9_2.4 | 07.11.2023 |
SB20231107124 SB2023112144 SB2023120658 and 9 more |
||
| #VU82896 - Out-of-bounds read CVE-2022-43681 |
CWE-125 | Medium | 8.3.1-11.el9_3 | 07.11.2023 |
SB20231107123 SB20231107128 SB20231018146 |
||
| #VU82891 - Out-of-bounds read CVE-2023-41359 |
CWE-125 | Medium | 8.5.3-4.el9 | 07.11.2023 |
SB2023091371 SB2023110753 SB2023110754 and 3 more |
||
| #VU81446 - Out-of-bounds read CVE-2023-41360 |
CWE-125 | Medium | 8.5.3-4.el9 | 03.10.2023 |
SB2023091371 SB2023100349 SB2023101732 and 7 more |
||
| #VU81445 - NULL Pointer Dereference CVE-2023-41909 |
CWE-476 | Medium | 7.5.1-22.el8, 8.5.3-4.el9 | 03.10.2023 |
SB2023091371 SB2023100349 SB2023100350 and 9 more |
||
| #VU81444 - Improper input validation CVE-2023-41358 |
CWE-20 | Medium | 7.5.1-22.el8, 8.5.3-4.el9 | 03.10.2023 |
SB2023091371 SB2023100349 SB2023100350 and 13 more |
||
| #VU80766 - Improper input validation CVE-2023-38802 |
CWE-20 | Medium | 7.0-5.el8_1.1, 7.0-5.el8_2.1, 7.5.1-7.el8_8.2, 7.5-4.el8_4.4, 7.5-11.el8_6.2, 8.0-5.el9_0.1, 8.3.1-5.el9_2.2 | 13.09.2023 |
SB2023091371 SB2023091372 SB2023091860 and 21 more |
||
| #VU79710 - Reachable Assertion CVE-2022-36440 |
CWE-617 | Medium | 8.3.1-11.el9_3 | 18.08.2023 |
SB20230818250 SB2023082007 SB2023082008 and 3 more |
||
| #VU76911 - Improper input validation CVE-2023-31490 |
CWE-20 | Medium | 7.5.1-22.el8, 8.5.3-4.el9 | 05.06.2023 |
SB2023050410 SB2023060533 SB2023061528 and 10 more |
||
| #VU76910 - Improper input validation CVE-2023-31489 |
CWE-20 | Medium | 8.5.3-4.el9 | 05.06.2023 |
SB2023050410 SB2023060533 SB2023061528 and 6 more |
||
| #VU75720 - Out-of-bounds read CVE-2022-40302 |
CWE-125 | Medium | 8.3.1-11.el9_3 | 04.05.2023 |
SB2023050410 SB20231107128 SB20231018146 |
||
| #VU75718 - Out-of-bounds read CVE-2022-40318 |
CWE-125 | Medium | 8.3.1-11.el9_3 | 04.05.2023 |
SB2023050410 SB20231107128 SB20231018146 |
||
| #VU69340 - Memory corruption CVE-2022-26125 |
CWE-119 | High | 8.2.2-4.el9 | 15.11.2022 |
SB2022081217 SB2022111545 SB2022031815 and 1 more |
||
| #VU67277 - Out-of-bounds read CVE-2022-37032 |
CWE-125 | Medium | 7.5.1-7.el8, 8.3.1-5.el9 | 13.09.2022 |
SB2022091376 SB2022091378 SB2022101848 and 10 more |