Input validation error in frr - CVE-2023-38406

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU82897

Input validation error in frr - CVE-2023-38406

Published: November 7, 2023


Vulnerability identifier: #VU82897
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-38406
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in bgpd/bgp_flowspec.c. A remote attacker can send specially crafted input to the application and perform a denial of service (DoS) attack.


Affected software

frr
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Server Applications Module
openSUSE Leap
Ubuntu
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
frr (Ubuntu package)
libfrrgrpc_pb0
libfrrcares0-debuginfo
frr
frr-debugsource
libfrrospfapiclient0-debuginfo
libfrrfpm_pb0
libfrrsnmp0
libfrr0-debuginfo
libfrr_pb0
frr-devel
libmlag_pb0
libfrrcares0
libfrrzmq0-debuginfo
libfrr0
libmlag_pb0-debuginfo
frr-debuginfo
libfrr_pb0-debuginfo
libfrrsnmp0-debuginfo
libfrrospfapiclient0
libfrrzmq0
libfrrfpm_pb0-debuginfo
libfrrgrpc_pb0-debuginfo
frr (Red Hat package)
frr-selinux
frr-doc

How to mitigate CVE-2023-38406

Install updates from vendor's website.

frr - update to 8.4.3
frr (Ubuntu package) - addressed in versions Ubuntu Pro, 8.1-1ubuntu1.8, 8.4.2-1ubuntu1.6, 8.4.4-1.1ubuntu1.2
libfrrgrpc_pb0 - update to 7.4-150300.4.26.1
libfrrcares0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
frr - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
frr-debugsource - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrospfapiclient0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrfpm_pb0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrsnmp0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrr0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrr_pb0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
frr-devel - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libmlag_pb0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrcares0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrzmq0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrr0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libmlag_pb0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
frr-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrr_pb0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrsnmp0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrospfapiclient0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrzmq0 - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrfpm_pb0-debuginfo - addressed in versions 7.4-150300.4.26.1, 8.4-150500.4.15.1, 8.5.6-150500.4.30.1
libfrrgrpc_pb0-debuginfo - update to 7.4-150300.4.26.1
frr (Red Hat package) - addressed in versions 7.5.1-7.el8_8.5, 7.5.1-13.el8_9.3, 7.5-11.el8_6.7, 8.0-5.el9_0.3, 8.3.1-5.el9_2.4
frr-selinux - update to 7.5.1-16.0.2
frr - update to 7.5.1-16.0.2
frr-doc - update to 7.5.1-16.0.2

External References

Related Security Bulletins