CVE-2023-38802
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial...
CVE-2023-38802 is a high vulnerability (CVSS 7.5) in Frrouting, published August 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. Fixed in frr 8.3.1-5.el9_2.2.alma.
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
CVE-2023-38802- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-354
- Updated
- 2026-11-02
CVE List No score
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
CVE-2023-38802- Updated
- 2026-11-02
EUVDEUVD-2023-42575 No score
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
EUVD-2023-42575- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xh4f-v933-c556
7.5
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial...
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
GHSA-xh4f-v933-c556- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-354
- Updated
- 2026-11-02
OSVAZL-28614
7.5
CVE-2023-38802 affecting package frr for versions less than 8.5.3-2
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
AZL-28614- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-38802
7.5
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
DEBIAN-CVE-2023-38802- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 20 moreShow less
OSVRHSA-2023:5194
7.5
Red Hat Security Advisory: frr security update
- Record
RHSA-2023:5194- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5195
7.5
Red Hat Security Advisory: frr security and bug fix update
- Record
RHSA-2023:5195- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5196
7.5
Red Hat Security Advisory: frr security and bug fix update
- Record
RHSA-2023:5196- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5219
7.5
Red Hat Security Advisory: frr security and bug fix update
- Record
RHSA-2023:5219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5457
7.5
Red Hat Security Advisory: frr security update
- Record
RHSA-2023:5457- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5464
7.5
Red Hat Security Advisory: frr security update
- Record
RHSA-2023:5464- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5465
7.5
Red Hat Security Advisory: frr security update
- Record
RHSA-2023:5465- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-38802
7.5
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
UBUNTU-CVE-2023-38802- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2023:5194 No score
Important: frr security update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.
Security Fix(es):
- frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:5194- Updated
- 2026-11-02
OSVALSA-2023:5219 No score
Important: frr security and bug fix update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.
Security Fix(es):
- frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- BFD crash in FRR running in MetalLB (BZ#2231829)
- Record
ALSA-2023:5219- Updated
- 2026-11-02
OSV No score
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
- Record
CVE-2023-38802- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13191-1 No score
frr-8.4-5.1 on GA media
These are all security issues fixed in the frr-8.4-5.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13191-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3709-1 No score
Security update for frr
This update for frr fixes the following issues:
- CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284).
- CVE-2023-41358: Fixed crash in bgpd/bgp_packet.c (bsc#1214735).
- CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgp_packet.c (bsc#1214739).
- CVE-2023-3748: Fixed inifinite loop in babld message parsing may cause DoS (bsc#1213434).
- CVE-2023-41909: Fixed NULL pointer dereference due to processing in bgp_nlri_parse_flowspec (bsc#1215065).
- Record
SUSE-SU-2023:3709-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3762-1 No score
Security update for frr
This update for frr fixes the following issues:
- CVE-2023-38802: Fixed bad length handling when processing BGP attributes. (bsc#1213284)
- CVE-2023-41358: Fixed a possible crash when processing NLRIs with an attribute length of zero. (bsc#1214735)
- CVE-2023-41909: Fixed NULL pointer dereference due to processing in bgp_nlri_parse_flowspec (bsc#1215065).
- Record
SUSE-SU-2023:3762-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3793-1 No score
Security update for quagga
This update for quagga fixes the following issues:
- CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284).
- CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero (bsc#1214735).
- Record
SUSE-SU-2023:3793-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3836-1 No score
Security update for quagga
This update for quagga fixes the following issues:
- CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284).
- CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero (bsc#1214735).
- Record
SUSE-SU-2023:3836-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3839-1 No score
Security update for quagga
This update for quagga fixes the following issues:
- CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284).
- CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero (bsc#1214735).
- Record
SUSE-SU-2023:3839-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:4090-1 No score
Security update for frr
This update for frr fixes the following issues:
Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for:
- CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950, CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234, CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360, CVE-2023-41358,CVE-2023-38802,CVE-2023-38407,CVE-2023-38406, CVE-2023-3748,CVE-2023-31490,CVE-2023-31489 and other bugfixes. See https://frrouting.org/release/8.5.6/ for details.
The most recent frr 8.x series provides several new features, improvements and bug fixes for various protocols and daemons, especially for PIM/PIMv6/BGP and VRF support.
See https://frrouting.org/release/8.5/ for details and links.
- Record
SUSE-SU-2024:4090-1- Updated
- 2026-11-02
OSVUSN-6323-1 No score
frr vulnerability
Ben Cartwright-Cox discovered that FRR did not handle RFC 7606 attributes properly. A remote attacker could possibly use this to cause denial of service.
- Record
USN-6323-1- Updated
- 2026-11-02
OSVUSN-6807-1 No score
frr vulnerabilities
It was discovered that FRR incorrectly handled certain network traffic. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2022-26126, CVE-2022-26127, CVE-2022-26128, CVE-2022-26129, CVE-2022-37032, CVE-2022-37035, CVE-2023-31490, CVE-2023-38406, CVE-2023-38407, CVE-2023-46752, CVE-2023-46753, CVE-2023-47234, CVE-2023-47235, CVE-2024-31948)
Ben Cartwright-Cox discovered that FRR incorrectly handled certain network traffic. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2023-38802)
- Record
USN-6807-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
frrAlmaLinux:9 |
before 8.3.1-5.el9_2.2.alma | 8.3.1-5.el9_2.2.alma |
frr-selinuxAlmaLinux:9 |
before 8.3.1-5.el9_2.2.alma | 8.3.1-5.el9_2.2.alma |
frrAlmaLinux:8 |
before 7.5.1-7.el8_8.2.alma.1 | 7.5.1-7.el8_8.2.alma.1 |
frr-selinuxAlmaLinux:8 |
before 7.5.1-7.el8_8.2.alma.1 | 7.5.1-7.el8_8.2.alma.1 |
frrAzure Linux:2 |
before 8.5.3-2 | 8.5.3-2 |
frrDebian:12 |
before 8.4.4-1.1~deb12u1, plus listed versions 8.4.2-18.4.4-1 |
8.4.4-1.1~deb12u1 |
frrDebian:13 |
before 8.4.4-1.1 | 8.4.4-1.1 |
frrDebian:14 |
before 8.4.4-1.1 | 8.4.4-1.1 |
frrDebian:10 |
before 7.5.1-1.1+deb10u1, plus listed versions 6.0.2-26.0.2-2+deb10u16.0.2-2+deb10u27.2-17.2.1-1 Show 7 moreShow less7.3.1-17.4-17.4-1.17.4-27.5-17.5.1-17.5.1-1.1 |
7.5.1-1.1+deb10u1 |
frrDebian:11 |
before 7.5.1-1.1+deb11u2, plus listed versions 7.5.1-1.17.5.1-1.1+deb11u1 |
7.5.1-1.1+deb11u2 |
Show 77 moreShow less
| Package | Affected | Fixed |
|---|---|---|
frrRed Hat:enterprise_linux:9::appstream |
before 0:8.3.1-5.el9_2.2 | 0:8.3.1-5.el9_2.2 |
frr-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:8.3.1-5.el9_2.2 | 0:8.3.1-5.el9_2.2 |
frr-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:8.3.1-5.el9_2.2 | 0:8.3.1-5.el9_2.2 |
frr-selinuxRed Hat:enterprise_linux:9::appstream |
before 0:8.3.1-5.el9_2.2 | 0:8.3.1-5.el9_2.2 |
frrRed Hat:rhel_eus:8.6::appstream |
before 0:7.5-11.el8_6.2 | 0:7.5-11.el8_6.2 |
frr-debuginfoRed Hat:rhel_eus:8.6::appstream |
before 0:7.5-11.el8_6.2 | 0:7.5-11.el8_6.2 |
frr-debugsourceRed Hat:rhel_eus:8.6::appstream |
before 0:7.5-11.el8_6.2 | 0:7.5-11.el8_6.2 |
frrRed Hat:rhel_aus:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frr-debuginfoRed Hat:rhel_aus:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frr-debugsourceRed Hat:rhel_aus:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frrRed Hat:rhel_e4s:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frr-debuginfoRed Hat:rhel_e4s:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frr-debugsourceRed Hat:rhel_e4s:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frrRed Hat:rhel_tus:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frr-debuginfoRed Hat:rhel_tus:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frr-debugsourceRed Hat:rhel_tus:8.4::appstream |
before 0:7.5-4.el8_4.4 | 0:7.5-4.el8_4.4 |
frrRed Hat:enterprise_linux:8::appstream |
before 0:7.5.1-7.el8_8.2 | 0:7.5.1-7.el8_8.2 |
frr-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:7.5.1-7.el8_8.2 | 0:7.5.1-7.el8_8.2 |
frr-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:7.5.1-7.el8_8.2 | 0:7.5.1-7.el8_8.2 |
frr-selinuxRed Hat:enterprise_linux:8::appstream |
before 0:7.5.1-7.el8_8.2 | 0:7.5.1-7.el8_8.2 |
frrRed Hat:rhel_eus:9.0::appstream |
before 0:8.0-5.el9_0.1 | 0:8.0-5.el9_0.1 |
frr-debuginfoRed Hat:rhel_eus:9.0::appstream |
before 0:8.0-5.el9_0.1 | 0:8.0-5.el9_0.1 |
frr-debugsourceRed Hat:rhel_eus:9.0::appstream |
before 0:8.0-5.el9_0.1 | 0:8.0-5.el9_0.1 |
frrRed Hat:rhel_e4s:8.1::appstream |
before 0:7.0-5.el8_1.1 | 0:7.0-5.el8_1.1 |
frr-contribRed Hat:rhel_e4s:8.1::appstream |
before 0:7.0-5.el8_1.1 | 0:7.0-5.el8_1.1 |
frr-debuginfoRed Hat:rhel_e4s:8.1::appstream |
before 0:7.0-5.el8_1.1 | 0:7.0-5.el8_1.1 |
frr-debugsourceRed Hat:rhel_e4s:8.1::appstream |
before 0:7.0-5.el8_1.1 | 0:7.0-5.el8_1.1 |
frrRed Hat:rhel_aus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-contribRed Hat:rhel_aus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-debuginfoRed Hat:rhel_aus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-debugsourceRed Hat:rhel_aus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frrRed Hat:rhel_e4s:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-contribRed Hat:rhel_e4s:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-debuginfoRed Hat:rhel_e4s:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-debugsourceRed Hat:rhel_e4s:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frrRed Hat:rhel_tus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-contribRed Hat:rhel_tus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-debuginfoRed Hat:rhel_tus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frr-debugsourceRed Hat:rhel_tus:8.2::appstream |
before 0:7.0-5.el8_2.1 | 0:7.0-5.el8_2.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 8.4-150500.4.8.1 | 8.4-150500.4.8.1 |
frropenSUSE:Leap 15.5 |
before 8.4-150500.4.8.1 | 8.4-150500.4.8.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP4 |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frrSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frrSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frrSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frrSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frrSUSE:Manager Proxy 4.2 |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frrSUSE:Manager Server 4.2 |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frrSUSE:Enterprise Storage 7.1 |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
frropenSUSE:Leap 15.4 |
before 7.4-150300.4.17.1 | 7.4-150300.4.17.1 |
quaggaSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.1.1-17.10.1 | 1.1.1-17.10.1 |
quaggaSUSE:Linux Enterprise Server 12 SP5 |
before 1.1.1-17.10.1 | 1.1.1-17.10.1 |
quaggaSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.1.1-17.10.1 | 1.1.1-17.10.1 |
quaggaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Manager Proxy 4.2 |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Manager Server 4.2 |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Enterprise Storage 7.1 |
before 1.1.1-150000.4.3.1 | 1.1.1-150000.4.3.1 |
quaggaSUSE:Linux Enterprise Module for Server Applications 15 SP4 |
before 1.1.1-150400.12.5.1 | 1.1.1-150400.12.5.1 |
quaggaSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 1.1.1-150400.12.5.1 | 1.1.1-150400.12.5.1 |
quaggaopenSUSE:Leap 15.4 |
before 1.1.1-150400.12.5.1 | 1.1.1-150400.12.5.1 |
quaggaopenSUSE:Leap 15.5 |
before 1.1.1-150400.12.5.1 | 1.1.1-150400.12.5.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Leap 15.5 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frropenSUSE:Leap 15.6 |
before 8.5.6-150500.4.30.1 | 8.5.6-150500.4.30.1 |
frrUbuntu:Pro:20.04:LTS |
before 7.2.1-1ubuntu0.2+esm2, plus listed versions 6.0.2-2build27.2-1ubuntu17.2-1ubuntu27.2.1-17.2.1-1ubuntu0.17.2.1-1ubuntu0.27.2.1-1ubuntu0.2+esm1 |
7.2.1-1ubuntu0.2+esm2 |
frrUbuntu:22.04:LTS |
before 8.1-1ubuntu1.5, plus listed versions 7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.28.1-1ubuntu1.38.1-1ubuntu1.4 |
8.1-1ubuntu1.5 |
frropenSUSE:Tumbleweed |
before 8.4-5.1 | 8.4-5.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling
news.ycombinator.com/item?id=37305800
debian.org/security/2023/dsa-5495
lists.debian.org/debian-lts-announce/2023/09/msg00020.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO
Show 77 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4
nvd.nist.gov/vuln/detail/CVE-2023-38802
github.com/advisories/GHSA-xh4f-v933-c556
access.redhat.com/errata/RHSA-2023:5194
access.redhat.com/security/cve/CVE-2023-38802
bugzilla.redhat.com/2230983
errata.almalinux.org/9/ALSA-2023-5194.html
access.redhat.com/errata/RHSA-2023:5219
errata.almalinux.org/8/ALSA-2023-5219.html
github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38802.json
security-tracker.debian.org/tracker/CVE-2023-38802
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2230983
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5194.json
cve.org/CVERecord?id=CVE-2023-38802
access.redhat.com/errata/RHSA-2023:5195
bugzilla.redhat.com/show_bug.cgi?id=2231830
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5195.json
access.redhat.com/errata/RHSA-2023:5196
bugzilla.redhat.com/show_bug.cgi?id=2231831
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5196.json
bugzilla.redhat.com/show_bug.cgi?id=2231829
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5219.json
access.redhat.com/errata/RHSA-2023:5457
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5457.json
access.redhat.com/errata/RHSA-2023:5464
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5464.json
access.redhat.com/errata/RHSA-2023:5465
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5465.json
suse.com/support/update/announcement/2023/suse-su-20233709-1
bugzilla.suse.com/1213284
bugzilla.suse.com/1213434
bugzilla.suse.com/1214735
bugzilla.suse.com/1214739
bugzilla.suse.com/1215065
suse.com/security/cve/CVE-2023-3748
suse.com/security/cve/CVE-2023-38802
suse.com/security/cve/CVE-2023-41358
suse.com/security/cve/CVE-2023-41360
suse.com/security/cve/CVE-2023-41909
suse.com/support/update/announcement/2023/suse-su-20233762-1
suse.com/support/update/announcement/2023/suse-su-20233793-1
suse.com/support/update/announcement/2023/suse-su-20233836-1
suse.com/support/update/announcement/2023/suse-su-20233839-1
suse.com/support/update/announcement/2024/suse-su-20244090-1
suse.com/security/cve/CVE-2023-31489
suse.com/security/cve/CVE-2023-31490
suse.com/security/cve/CVE-2023-38406
suse.com/security/cve/CVE-2023-38407
suse.com/security/cve/CVE-2023-46752
suse.com/security/cve/CVE-2023-46753
suse.com/security/cve/CVE-2023-47234
suse.com/security/cve/CVE-2023-47235
suse.com/security/cve/CVE-2024-27913
suse.com/security/cve/CVE-2024-31948
suse.com/security/cve/CVE-2024-31950
suse.com/security/cve/CVE-2024-31951
suse.com/security/cve/CVE-2024-34088
suse.com/security/cve/CVE-2024-44070
ubuntu.com/security/CVE-2023-38802
kb.cert.org/vuls/id/347067
ubuntu.com/security/notices/USN-6323-1
ubuntu.com/security/notices/USN-6807-1
ubuntu.com/security/CVE-2022-26126
ubuntu.com/security/CVE-2022-26127
ubuntu.com/security/CVE-2022-26128
ubuntu.com/security/CVE-2022-26129
ubuntu.com/security/CVE-2022-37032
ubuntu.com/security/CVE-2022-37035
ubuntu.com/security/CVE-2023-31490
ubuntu.com/security/CVE-2023-38406
ubuntu.com/security/CVE-2023-38407
ubuntu.com/security/CVE-2023-46752
ubuntu.com/security/CVE-2023-46753
ubuntu.com/security/CVE-2023-47234
ubuntu.com/security/CVE-2023-47235
ubuntu.com/security/CVE-2024-31948