The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4130-1 advisory.

  - An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and     bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This     could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User     interaction is not needed for exploitation. (CVE-2022-37035)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2022:4130-1)

high Nessus Plugin ID 167933

Version 1.4

Version 1.3

Version 1.2

Version 1.4 Feb 8, 2023, 11:19 PM Logic Changes (Updated openSUSE package checks in SUSE plugins)
Version 1.3 Jan 21, 2023, 5:26 AM Logic Changes (Added package checks for openSuSE)
Version 1.2 Nov 19, 2022, 9:42 AM New