Bugzilla – Bug 1222518
VUL-0: CVE-2024-31948: frr, quagga: bgpd daemon crash
Last modified: 2024-05-03 17:12:30 UTC
In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-31948 https://www.cve.org/CVERecord?id=CVE-2024-31948 https://github.com/FRRouting/frr/pull/15628 https://github.com/FRRouting/frr/pull/15628/commits/ba6a8f1a31e1a88df2de69ea46068e8bd9b97138 https://bugzilla.redhat.com/show_bug.cgi?id=2273982
quagga is not affected, but frr is: - SUSE:SLE-15-SP3:Update/frr - SUSE:SLE-15-SP5:Update/frr - openSUSe:Factory/frr
Tumbleweed https://build.opensuse.org/request/show/1166713
This is an autogenerated message for OBS integration: This bug (1222518) was mentioned in https://build.opensuse.org/request/show/1167542 Factory / frr
SUSE-SU-2024:1453-1: An update that solves two vulnerabilities can now be installed. Category: security (important) Bug References: 1220548, 1222518 CVE References: CVE-2024-27913, CVE-2024-31948 Maintenance Incident: [SUSE:Maintenance:33572](https://smelt.suse.de/incident/33572/) Sources used: openSUSE Leap 15.5 (src): frr-8.4-150500.4.20.1 Server Applications Module 15-SP5 (src): frr-8.4-150500.4.20.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2024:1475-1: An update that solves one vulnerability can now be installed. Category: security (important) Bug References: 1222518 CVE References: CVE-2024-31948 Maintenance Incident: [SUSE:Maintenance:33573](https://smelt.suse.de/incident/33573/) Sources used: openSUSE Leap 15.3 (src): frr-7.4-150300.4.23.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): frr-7.4-150300.4.23.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src): frr-7.4-150300.4.23.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src): frr-7.4-150300.4.23.1 SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src): frr-7.4-150300.4.23.1 SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (src): frr-7.4-150300.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): frr-7.4-150300.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src): frr-7.4-150300.4.23.1 SUSE Manager Proxy 4.3 (src): frr-7.4-150300.4.23.1 SUSE Manager Retail Branch Server 4.3 (src): frr-7.4-150300.4.23.1 SUSE Manager Server 4.3 (src): frr-7.4-150300.4.23.1 SUSE Enterprise Storage 7.1 (src): frr-7.4-150300.4.23.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.