Information disclosure in frr - CVE-2017-15865

Vulnerability identifier: #VU97714

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-15865

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error when handling attribute length in BPG packets. A remote attacker can send a malformed BGP UPDATE packet from a connected peer and trigger transmission of up to a few thousand unintended bytes.

frr
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Server Applications Module
openSUSE Leap
libzebra1
libfpm_pb0-debuginfo
quagga-devel
libospf0-debuginfo
quagga
libquagga_pb0
libospfapiclient0-debuginfo
libospf0
libquagga_pb0-debuginfo
quagga-debuginfo
libospfapiclient0
libzebra1-debuginfo
libfpm_pb0
quagga-debugsource
frr-debugsource
frr
libfrrzmq0-debuginfo
libfrr0
libfrrfpm_pb0-debuginfo
libfrrcares0
libfrr0-debuginfo
libmlag_pb0
frr-devel
frr-debuginfo
libfrrsnmp0
libfrrgrpc_pb0-debuginfo
libfrrsnmp0-debuginfo
libfrrfpm_pb0
libfrrcares0-debuginfo
libfrr_pb0-debuginfo
libmlag_pb0-debuginfo
libfrr_pb0
libfrrzmq0
libfrrospfapiclient0-debuginfo
libfrrgrpc_pb0
libfrrospfapiclient0

Install updates from vendor's website.

frr - addressed in versions 2.0.2, 3.0.2
libzebra1 - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libfpm_pb0-debuginfo - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
quagga-devel - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libospf0-debuginfo - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
quagga - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libquagga_pb0 - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libospfapiclient0-debuginfo - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libospf0 - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libquagga_pb0-debuginfo - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
quagga-debuginfo - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libospfapiclient0 - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libzebra1-debuginfo - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
libfpm_pb0 - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
quagga-debugsource - addressed in versions 1.1.1-17.13.1, 1.1.1-150000.4.6.1, 1.1.1-150400.12.8.1
frr-debugsource - update to 7.4-150300.4.32.1
frr - update to 7.4-150300.4.32.1
libfrrzmq0-debuginfo - update to 7.4-150300.4.32.1
libfrr0 - update to 7.4-150300.4.32.1
libfrrfpm_pb0-debuginfo - update to 7.4-150300.4.32.1
libfrrcares0 - update to 7.4-150300.4.32.1
libfrr0-debuginfo - update to 7.4-150300.4.32.1
libmlag_pb0 - update to 7.4-150300.4.32.1
frr-devel - update to 7.4-150300.4.32.1
frr-debuginfo - update to 7.4-150300.4.32.1
libfrrsnmp0 - update to 7.4-150300.4.32.1
libfrrgrpc_pb0-debuginfo - update to 7.4-150300.4.32.1
libfrrsnmp0-debuginfo - update to 7.4-150300.4.32.1
libfrrfpm_pb0 - update to 7.4-150300.4.32.1
libfrrcares0-debuginfo - update to 7.4-150300.4.32.1
libfrr_pb0-debuginfo - update to 7.4-150300.4.32.1
libmlag_pb0-debuginfo - update to 7.4-150300.4.32.1
libfrr_pb0 - update to 7.4-150300.4.32.1
libfrrzmq0 - update to 7.4-150300.4.32.1
libfrrospfapiclient0-debuginfo - update to 7.4-150300.4.32.1
libfrrgrpc_pb0 - update to 7.4-150300.4.32.1
libfrrospfapiclient0 - update to 7.4-150300.4.32.1

• https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html
• https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690
• https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-Disclosure

• Information disclosure in FRRouting
• SUSE update for quagga
• SUSE update for quagga
• SUSE update for quagga
• SUSE update for frr