Security update for frr SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3709-1 Final 1 1 2023-09-20T16:04:43Z current 2023-09-20T16:04:43Z 2023-09-20T16:04:43Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for frr This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284). - CVE-2023-41358: Fixed crash in bgpd/bgp_packet.c (bsc#1214735). - CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgp_packet.c (bsc#1214739). - CVE-2023-3748: Fixed inifinite loop in babld message parsing may cause DoS (bsc#1213434). - CVE-2023-41909: Fixed NULL pointer dereference due to processing in bgp_nlri_parse_flowspec (bsc#1215065). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-3709,SUSE-SLE-Module-Server-Applications-15-SP5-2023-3709,openSUSE-SLE-15.5-2023-3709 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233709-1/ Link for SUSE-SU-2023:3709-1 https://lists.suse.com/pipermail/sle-security-updates/2023-September/016260.html E-Mail link for SUSE-SU-2023:3709-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1213284 SUSE Bug 1213284 https://bugzilla.suse.com/1213434 SUSE Bug 1213434 https://bugzilla.suse.com/1214735 SUSE Bug 1214735 https://bugzilla.suse.com/1214739 SUSE Bug 1214739 https://bugzilla.suse.com/1215065 SUSE Bug 1215065 https://www.suse.com/security/cve/CVE-2023-3748/ SUSE CVE CVE-2023-3748 page https://www.suse.com/security/cve/CVE-2023-38802/ SUSE CVE CVE-2023-38802 page https://www.suse.com/security/cve/CVE-2023-41358/ SUSE CVE CVE-2023-41358 page https://www.suse.com/security/cve/CVE-2023-41360/ SUSE CVE CVE-2023-41360 page https://www.suse.com/security/cve/CVE-2023-41909/ SUSE CVE CVE-2023-41909 page SUSE Linux Enterprise Module for Server Applications 15 SP5 openSUSE Leap 15.5 frr-8.4-150500.4.8.1 frr-devel-8.4-150500.4.8.1 libfrr0-8.4-150500.4.8.1 libfrr_pb0-8.4-150500.4.8.1 libfrrcares0-8.4-150500.4.8.1 libfrrfpm_pb0-8.4-150500.4.8.1 libfrrospfapiclient0-8.4-150500.4.8.1 libfrrsnmp0-8.4-150500.4.8.1 libfrrzmq0-8.4-150500.4.8.1 libmlag_pb0-8.4-150500.4.8.1 frr-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 frr-devel-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrr0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrr_pb0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrcares0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrfpm_pb0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrospfapiclient0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrsnmp0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrzmq0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libmlag_pb0-8.4-150500.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 frr-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 frr-devel-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libfrr0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libfrr_pb0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libfrrcares0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libfrrfpm_pb0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libfrrospfapiclient0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libfrrsnmp0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libfrrzmq0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 libmlag_pb0-8.4-150500.4.8.1 as a component of openSUSE Leap 15.5 A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. CVE-2023-3748 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrcares0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrfpm_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrospfapiclient0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrsnmp0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrzmq0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libmlag_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-devel-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrcares0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrfpm_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrospfapiclient0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrsnmp0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrzmq0-8.4-150500.4.8.1 openSUSE Leap 15.5:libmlag_pb0-8.4-150500.4.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233709-1/ https://www.suse.com/security/cve/CVE-2023-3748.html CVE-2023-3748 https://bugzilla.suse.com/1213434 SUSE Bug 1213434 FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation). CVE-2023-38802 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrcares0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrfpm_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrospfapiclient0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrsnmp0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrzmq0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libmlag_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-devel-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrcares0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrfpm_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrospfapiclient0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrsnmp0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrzmq0-8.4-150500.4.8.1 openSUSE Leap 15.5:libmlag_pb0-8.4-150500.4.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233709-1/ https://www.suse.com/security/cve/CVE-2023-38802.html CVE-2023-38802 https://bugzilla.suse.com/1213284 SUSE Bug 1213284 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero. CVE-2023-41358 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrcares0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrfpm_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrospfapiclient0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrsnmp0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrzmq0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libmlag_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-devel-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrcares0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrfpm_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrospfapiclient0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrsnmp0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrzmq0-8.4-150500.4.8.1 openSUSE Leap 15.5:libmlag_pb0-8.4-150500.4.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233709-1/ https://www.suse.com/security/cve/CVE-2023-41358.html CVE-2023-41358 https://bugzilla.suse.com/1214735 SUSE Bug 1214735 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation. CVE-2023-41360 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrcares0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrfpm_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrospfapiclient0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrsnmp0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrzmq0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libmlag_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-devel-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrcares0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrfpm_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrospfapiclient0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrsnmp0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrzmq0-8.4-150500.4.8.1 openSUSE Leap 15.5:libmlag_pb0-8.4-150500.4.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233709-1/ https://www.suse.com/security/cve/CVE-2023-41360.html CVE-2023-41360 https://bugzilla.suse.com/1214739 SUSE Bug 1214739 An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference. CVE-2023-41909 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrcares0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrfpm_pb0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrospfapiclient0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrsnmp0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrzmq0-8.4-150500.4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libmlag_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-8.4-150500.4.8.1 openSUSE Leap 15.5:frr-devel-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrr_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrcares0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrfpm_pb0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrospfapiclient0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrsnmp0-8.4-150500.4.8.1 openSUSE Leap 15.5:libfrrzmq0-8.4-150500.4.8.1 openSUSE Leap 15.5:libmlag_pb0-8.4-150500.4.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233709-1/ https://www.suse.com/security/cve/CVE-2023-41909.html CVE-2023-41909 https://bugzilla.suse.com/1215065 SUSE Bug 1215065