CVE-2023-41359 - frr: out of bounds read in bgp_attr_aigp_valid

Back Back to CVE browser

CRITICAL

frr: out of bounds read in bgp_attr_aigp_valid

Published Aug 29, 2023

9.1

CRITICAL

CVSS 3.1

EPSS 1.15%

Description

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.

Affected products

Red Hat Enterprise Linux 9

frr-0:8.5.3-4.el9

Fixed · RHSA-2024:2156
Red Hat Enterprise Linux 8

frr

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 9	frr-0:8.5.3-4.el9	Fixed	RHSA-2024:2156
Red Hat Enterprise Linux 8	frr	Not affected	n/a

Remediation

Red Hat statement

In Red Hat Enterprise Linux 8, the vulnerable code is not included. It was added in FRR-8.5 in upstream. The highest version of FRR utilized in RHEL-8 is 7.5. Hence, versions of FRR shipped with RHEL-8 are not affected by this vulnerability.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (9)

https://access.redhat.com/security/cve/CVE-2023-41359
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2235840
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45862
Advisory
https://github.com/FRRouting/frr/pull/14232
PatchVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
vendor-advisoryMailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/
vendor-advisoryMailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
vendor-advisoryMailing List
https://nvd.nist.gov/vuln/detail/CVE-2023-41359
https://www.cve.org/CVERecord?id=CVE-2023-41359

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-41359		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2235840		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45862		Advisory
https://github.com/FRRouting/frr/pull/14232		PatchVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/		vendor-advisoryMailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/		vendor-advisoryMailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/		vendor-advisoryMailing List
https://nvd.nist.gov/vuln/detail/CVE-2023-41359
https://www.cve.org/CVERecord?id=CVE-2023-41359