Buffer overflow in frr - CVE-2022-26126

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU69341

Buffer overflow in frr - CVE-2022-26126

Published: November 15, 2022


Vulnerability identifier: #VU69341
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-26126
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in isis_nb_notifications.c. A remote attacker can pass specially crafted data to the application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

frr
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
Ubuntu
Fedora
frr (Ubuntu package)
frr-debuginfo
libmlag_pb0-debuginfo
libmlag_pb0
libfrrzmq0-debuginfo
libfrrzmq0
libfrrsnmp0-debuginfo
libfrrsnmp0
libfrrospfapiclient0-debuginfo
libfrrospfapiclient0
libfrrgrpc_pb0-debuginfo
libfrrgrpc_pb0
libfrrfpm_pb0-debuginfo
libfrrfpm_pb0
libfrrcares0-debuginfo
libfrrcares0
libfrr_pb0-debuginfo
libfrr_pb0
libfrr0-debuginfo
libfrr0
frr-devel
frr-debugsource
frr

How to mitigate CVE-2022-26126

Install updates from vendor's website.

frr - update to 8.2
frr (Ubuntu package) - update to Ubuntu Pro
frr-debuginfo - update to 7.4-150300.4.3.1
libmlag_pb0-debuginfo - update to 7.4-150300.4.3.1
libmlag_pb0 - update to 7.4-150300.4.3.1
libfrrzmq0-debuginfo - update to 7.4-150300.4.3.1
libfrrzmq0 - update to 7.4-150300.4.3.1
libfrrsnmp0-debuginfo - update to 7.4-150300.4.3.1
libfrrsnmp0 - update to 7.4-150300.4.3.1
libfrrospfapiclient0-debuginfo - update to 7.4-150300.4.3.1
libfrrospfapiclient0 - update to 7.4-150300.4.3.1
libfrrgrpc_pb0-debuginfo - update to 7.4-150300.4.3.1
libfrrgrpc_pb0 - update to 7.4-150300.4.3.1
libfrrfpm_pb0-debuginfo - update to 7.4-150300.4.3.1
libfrrfpm_pb0 - update to 7.4-150300.4.3.1
libfrrcares0-debuginfo - update to 7.4-150300.4.3.1
libfrrcares0 - update to 7.4-150300.4.3.1
libfrr_pb0-debuginfo - update to 7.4-150300.4.3.1
libfrr_pb0 - update to 7.4-150300.4.3.1
libfrr0-debuginfo - update to 7.4-150300.4.3.1
libfrr0 - update to 7.4-150300.4.3.1
frr-devel - update to 7.4-150300.4.3.1
frr-debugsource - update to 7.4-150300.4.3.1
frr - update to 7.4-150300.4.3.1
frr - addressed in versions 8.0.1-2.fc34, 8.2.2-2.fc35, 8.2.2-2.fc36

External References

Related Security Bulletins