Threats affecting pkg:github/frrouting/frr

bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.

CVE-2023-38406 is a vulnerability in FRRouting (FRR) versions prior to 8.4.3 where the bgpd/bgp_flowspec.c component mishandles an NLRI length of zero, leading to a flowspec overflow condition. This flaw was fixed in version 8.4.3.

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).

FRRouting (FRR) versions up to and including 9.0.1 contain a vulnerability where processing a crafted BGP UPDATE message lacking mandatory attributes can cause the software to crash. This occurs, for example, when the message includes only an unknown transit attribute.

A vulnerability in FRRouting (FRR) up to version 9.0.1 causes the software to mishandle malformed MP_REACH_NLRI data, resulting in a crash.