CVE-2023-41359
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in...
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
- Record
CVE-2023-41359- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
- Record
CVE-2023-41359- Updated
- 2026-11-02
EUVDEUVD-2023-45862 No score
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
- Record
EUVD-2023-45862- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pwgp-j234-4fgq
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in...
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
- Record
GHSA-pwgp-j234-4fgq- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVAZL-28615
CVE-2023-41359 affecting package frr for versions less than 8.5.3-2
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
- Record
AZL-28615- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2156
Red Hat Security Advisory: frr security update
- Record
RHSA-2024:2156- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2024:2156 No score
Moderate: frr security update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.
Security Fix(es):
- frr: incorrect length check in bgp_capability_llgr() can lead do DoS (CVE-2023-31489)
- frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490)
- frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358)
- frr: out of bounds read in bgp_attr_aigp_valid (CVE-2023-41359)
- frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909)
- frr: mishandled malformed data leading to a crash (CVE-2023-46752)
- frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753)
- frr: ahead-of-stream read of ORF header (CVE-2023-41360)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2156- Updated
- 2026-11-02
OSV No score
An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
- Record
CVE-2023-41359- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
frrAlmaLinux:9 |
before 8.5.3-4.el9 | 8.5.3-4.el9 |
frr-selinuxAlmaLinux:9 |
before 8.5.3-4.el9 | 8.5.3-4.el9 |
frrAzure Linux:2 |
before 8.5.3-2 | 8.5.3-2 |
frrRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
frr-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
frr-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
frr-selinuxRed Hat:enterprise_linux:9::appstream |
before 0:8.5.3-4.el9 | 0:8.5.3-4.el9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-41359 is a critical vulnerability (CVSS 9.1) in Frrouting, published August 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. Fixed in frr 8.5.3-4.el9.
References
github.com/FRRouting/frr/pull/14232
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE
nvd.nist.gov/vuln/detail/CVE-2023-41359
Show 51 moreShow less
access.redhat.com/errata/RHSA-2024:2156
bugzilla.redhat.com/2235839
errata.almalinux.org/9/ALSA-2024-2156.html
issues.redhat.com/browse/RHEL-11664
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2156.json
cve.org/CVERecord?id=CVE-2023-31489