Buffer overflow in frr - CVE-2022-26129

Vulnerability identifier: #VU66470

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-26129

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the parse_hello_subtlv(), parse_ihu_subtlv(), and parse_update_subtlv() functions in babeld/message.c. A remote attacker can pass specially crafted data to the application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

frr
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
Ubuntu
frr (Ubuntu package)
libfrrfpm_pb0-debuginfo
libmlag_pb0-debuginfo
libmlag_pb0
libfrrzmq0-debuginfo
libfrrzmq0
libfrrsnmp0-debuginfo
libfrrsnmp0
libfrrospfapiclient0-debuginfo
libfrrospfapiclient0
libfrrgrpc_pb0-debuginfo
libfrrgrpc_pb0
frr
libfrrfpm_pb0
libfrrcares0-debuginfo
libfrrcares0
libfrr_pb0-debuginfo
libfrr_pb0
libfrr0-debuginfo
libfrr0
frr-devel
frr-debugsource
frr-debuginfo

Install updates from vendor's website.

frr - update to 8.2
frr (Ubuntu package) - update to Ubuntu Pro
libfrrfpm_pb0-debuginfo - update to 7.4-150300.4.3.1
libmlag_pb0-debuginfo - update to 7.4-150300.4.3.1
libmlag_pb0 - update to 7.4-150300.4.3.1
libfrrzmq0-debuginfo - update to 7.4-150300.4.3.1
libfrrzmq0 - update to 7.4-150300.4.3.1
libfrrsnmp0-debuginfo - update to 7.4-150300.4.3.1
libfrrsnmp0 - update to 7.4-150300.4.3.1
libfrrospfapiclient0-debuginfo - update to 7.4-150300.4.3.1
libfrrospfapiclient0 - update to 7.4-150300.4.3.1
libfrrgrpc_pb0-debuginfo - update to 7.4-150300.4.3.1
libfrrgrpc_pb0 - update to 7.4-150300.4.3.1
frr - update to 7.4-150300.4.3.1
libfrrfpm_pb0 - update to 7.4-150300.4.3.1
libfrrcares0-debuginfo - update to 7.4-150300.4.3.1
libfrrcares0 - update to 7.4-150300.4.3.1
libfrr_pb0-debuginfo - update to 7.4-150300.4.3.1
libfrr_pb0 - update to 7.4-150300.4.3.1
libfrr0-debuginfo - update to 7.4-150300.4.3.1
libfrr0 - update to 7.4-150300.4.3.1
frr-devel - update to 7.4-150300.4.3.1
frr-debugsource - update to 7.4-150300.4.3.1
frr-debuginfo - update to 7.4-150300.4.3.1

• https://github.com/FRRouting/frr/issues/10503

• Multiple vulnerabilities in FRRouting
• SUSE update for frr
• Ubuntu update for frr