An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6482-1 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

  - An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message     without mandatory attributes, e.g., one with only an unknown transit attribute. (CVE-2023-46753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2801 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2801 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2801 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:2801 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2202 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2202 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2202 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5362 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3211 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5685-1 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

  - An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and     bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This     could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User     interaction is not needed for exploitation. (CVE-2022-37035)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3246-1 advisory.

  - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and     denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. (CVE-2022-37032)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
185781	Ubuntu 20.04 LTS : Quagga vulnerabilities (USN-6482-1)	Nessus	Ubuntu Local Security Checks	critical
176298	Oracle Linux 8 : frr (ELSA-2023-2801)	Nessus	Oracle Linux Local Security Checks	critical
176181	AlmaLinux 8 : frr (ALSA-2023:2801)	Nessus	Alma Linux Local Security Checks	critical
175870	RHEL 8 : frr (RHSA-2023:2801)	Nessus	Red Hat Local Security Checks	critical
175837	CentOS 8 : frr (CESA-2023:2801)	Nessus	CentOS Local Security Checks	critical
175716	Oracle Linux 9 : frr (ELSA-2023-2202)	Nessus	Oracle Linux Local Security Checks	critical
175658	AlmaLinux 9 : frr (ALSA-2023:2202)	Nessus	Alma Linux Local Security Checks	critical
175430	RHEL 9 : frr (RHSA-2023:2202)	Nessus	Red Hat Local Security Checks	critical
171919	Debian DSA-5362-1 : frr - security update	Nessus	Debian Local Security Checks	critical
168229	Debian DLA-3211-1 : frr - LTS security update	Nessus	Debian Local Security Checks	critical
166219	Ubuntu 22.04 LTS : FRR vulnerabilities (USN-5685-1)	Nessus	Ubuntu Local Security Checks	critical
164967	SUSE SLES15 Security Update : frr (SUSE-SU-2022:3246-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2022-37032

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical