CVE-2023-31489
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service...
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
- Record
CVE-2023-31489- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
CVE List No score
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
- Record
CVE-2023-31489- Updated
- 2026-11-02
EUVDEUVD-2023-35794 No score
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
- Record
EUVD-2023-35794- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvch-6xgp-6mjp
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service...
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
- Record
GHSA-rvch-6xgp-6mjp- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-31489
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
- Record
DEBIAN-CVE-2023-31489- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2156
Red Hat Security Advisory: frr security update
- Record
RHSA-2024:2156- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVALSA-2024:2156 No score
Moderate: frr security update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.
Security Fix(es):
- frr: incorrect length check in bgp_capability_llgr() can lead do DoS (CVE-2023-31489)
- frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490)
- frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358)
- frr: out of bounds read in bgp_attr_aigp_valid (CVE-2023-41359)
- frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909)
- frr: mishandled malformed data leading to a crash (CVE-2023-46752)
- frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753)
- frr: ahead-of-stream read of ORF header (CVE-2023-41360)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2156- Updated
- 2026-11-02
OSVCLSA-2026-1778238289 No score
frr: Fix of 4 CVEs
- CVE-2022-43681: fix bgpd crash on malformed BGP OPEN messages with insufficient data
- CVE-2022-40318: fix out-of-bounds read in bgp_open_option_parse with extended option params
- CVE-2023-31489: fix out-of-bounds read in BGP Long-lived Graceful-Restart capability parsing
- CVE-2023-46752: fix bgpd crash on malformed MP_REACH_NLRI packets
- Record
CLSA-2026-1778238289- Updated
- 2026-11-02
OSV No score
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
- Record
CVE-2023-31489- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12967-1 No score
frr-8.4-4.1 on GA media
These are all security issues fixed in the frr-8.4-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12967-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2518-1 No score
Security update for frr
This update for frr fixes the following issues:
- CVE-2023-31489: Fixed a remote denial of service via a malformed BGP packet (bsc#1211248).
- CVE-2023-31490: Fixed a remote denial of service via a malformed BGP packet (bsc#1211249).
- Record
SUSE-SU-2023:2518-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:4090-1 No score
Security update for frr
This update for frr fixes the following issues:
Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for:
- CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950, CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234, CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360, CVE-2023-41358,CVE-2023-38802,CVE-2023-38407,CVE-2023-38406, CVE-2023-3748,CVE-2023-31490,CVE-2023-31489 and other bugfixes. See https://frrouting.org/release/8.5.6/ for details.
The most recent frr 8.x series provides several new features, improvements and bug fixes for various protocols and daemons, especially for PIM/PIMv6/BGP and VRF support.
See https://frrouting.org/release/8.5/ for details and links.
- Record
SUSE-SU-2024:4090-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
frrAlmaLinux:9 |
before 8.5.3-4.el9 | 8.5.3-4.el9 |
frr-selinuxAlmaLinux:9 |
before 8.5.3-4.el9 | 8.5.3-4.el9 |
frrTuxCare:AlmaLinux:9.2 |
before 8.3.1-5.el9_2.2.alma.tuxcare.els4 | 8.3.1-5.el9_2.2.alma.tuxcare.els4 |
frr-selinuxTuxCare:AlmaLinux:9.2 |
before 8.3.1-5.el9_2.2.alma.tuxcare.els4 | 8.3.1-5.el9_2.2.alma.tuxcare.els4 |
frrDebian:12 |
before 8.4.4-1, plus listed versions 8.4.2-1 |
8.4.4-1 |
frrDebian:13 |
before 8.4.4-1 | 8.4.4-1 |
frrDebian:14 |
before 8.4.4-1 | 8.4.4-1 |
frrRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
frr-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
frr-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
frr-selinuxRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 8.4-150500.4.3.1 | 8.4-150500.4.3.1 |
frropenSUSE:Leap 15.5 |
before 8.4-150500.4.3.1 | 8.4-150500.4.3.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Leap 15.5 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Leap 15.6 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Tumbleweed |
before 8.4-4.1 | 8.4-4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-31489 is a medium vulnerability (CVSS 5.5) in Frrouting, published May 9, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.03%, the 63rd percentile. Fixed in frr 8.5.3-4.el9.
References
github.com/FRRouting/frr/issues/13098
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE
nvd.nist.gov/vuln/detail/CVE-2023-31489
Show 77 moreShow less
access.redhat.com/errata/RHSA-2024:2156
bugzilla.redhat.com/2235839
errata.almalinux.org/9/ALSA-2024-2156.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778238289.html
security-tracker.debian.org/tracker/CVE-2023-31489
issues.redhat.com/browse/RHEL-11664
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2156.json
cve.org/CVERecord?id=CVE-2023-31489
suse.com/support/update/announcement/2023/suse-su-20232518-1
bugzilla.suse.com/1211248