Input validation error in frr - CVE-2023-31490

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU76911

Input validation error in frr - CVE-2023-31490

Published: June 5, 2023


Vulnerability identifier: #VU76911
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-31490
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input within the bgp_attr_psid_sub() function in bgpd. A remote attacker can pass specially crafted input to the server and perform a denial of service (DoS) attack.


Affected software

frr
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Server Applications Module
openSUSE Leap
Ubuntu
Fedora
frr (Ubuntu package)
frr-selinux
frr-doc
frr
frr (Red Hat package)
libfrrcares0
libfrr0
libfrrfpm_pb0-debuginfo
libfrrcares0-debuginfo
libfrrzmq0
libmlag_pb0-debuginfo
frr-devel
libfrr_pb0
frr-debugsource
libfrrospfapiclient0-debuginfo
libfrr_pb0-debuginfo
libmlag_pb0
frr-debuginfo
libfrrzmq0-debuginfo
libfrr0-debuginfo
libfrrsnmp0
libfrrsnmp0-debuginfo
libfrrfpm_pb0
libfrrospfapiclient0
Red Hat OpenShift Container Platform

How to mitigate CVE-2023-31490

Install updates from vendor's website.

frr - update to 8.5.1
frr (Ubuntu package) - addressed in versions Ubuntu Pro, 8.1-1ubuntu1.4, 8.1-1ubuntu1.5, 8.1-1ubuntu3.2, 8.4.2-1ubuntu1.1, 8.4.2-1ubuntu1.3
Red Hat OpenShift Container Platform - update to 4.17.0
frr-selinux - update to 7.5.1-16.0.4
frr-doc - update to 7.5.1-16.0.4
frr - update to 7.5.1-16.0.4
frr (Red Hat package) - addressed in versions 7.5.1-22.el8, 8.5.3-4.el9
libfrrcares0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrr0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrfpm_pb0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrcares0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrzmq0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libmlag_pb0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
frr-devel - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrr_pb0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
frr-debugsource - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrospfapiclient0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrr_pb0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libmlag_pb0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
frr-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrzmq0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrr0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrsnmp0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrsnmp0-debuginfo - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrfpm_pb0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
frr - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
libfrrospfapiclient0 - addressed in versions 8.4-150500.4.3.1, 8.5.6-150500.4.30.1
frr - addressed in versions 8.5.3-1.fc37, 8.5.3-1.fc38, 8.5.3-1.fc39

External References

Related Security Bulletins