{"id":"CVE-2023-41359","aliases":["ALSA-2024:2156","AZL-28615","EUVD-2023-45862","GHSA-pwgp-j234-4fgq","RHSA-2024:2156"],"status":"published","title":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in...","description":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01153,"percentile":0.67397,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-08-29T00:00:00Z","modified":"2026-10-30T02:45:18Z","fixes":[{"ecosystem":"Azure Linux:2","package":"frr","fixed_in":["8.5.3-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-4.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-4.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Azure Linux:2","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-4.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-4.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-4.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-4.el9"}]}],"bundled":8}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"frrouting","product":"frrouting"}],"references":[{"url":"https://github.com/FRRouting/frr/pull/14232","tags":["x_transferred","Patch","Vendor Advisory","fix","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/","tags":["vendor-advisory","x_transferred","Mailing List","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/","tags":["vendor-advisory","x_transferred","Mailing List","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/","tags":["vendor-advisory","x_transferred","Mailing List","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41359","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pwgp-j234-4fgq"},{"url":"https://access.redhat.com/errata/RHSA-2024:2156","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-31489","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-31490","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41358","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41359","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41360","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41909","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46752","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46753","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235839","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235840","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235842","tags":["report"]},{"url":"https://bugzilla.redhat.com/2237416","tags":["report"]},{"url":"https://bugzilla.redhat.com/2238990","tags":["report"]},{"url":"https://bugzilla.redhat.com/2238992","tags":["report"]},{"url":"https://bugzilla.redhat.com/2246379","tags":["report"]},{"url":"https://bugzilla.redhat.com/2246381","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2156.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41359.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246381","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-11664","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-15291","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2156.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31489","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31489","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31490","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31490","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41358","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/pull/14260","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41359","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41360","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41360","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/pull/14245","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41909","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46752","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46753","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/pull/14645/commits/d8482bf011cb2b173e85b65b4bf3d5061250cdb9","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2023-41359","description":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.","status":"published","published":"2023-08-29T00:00:00Z","modified":"2024-08-02T19:01:34.243Z","updated_at":"2026-11-02T14:35:18.88314Z"}],"euvd":[{"id":"EUVD-2023-45862","description":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.","status":"published","published":"2023-08-29T00:00:00Z","modified":"2024-08-02T19:01:34Z","updated_at":"2026-11-03T03:50:01.043754Z"}],"ghsa":[{"id":"GHSA-pwgp-j234-4fgq","title":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in...","description":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.","status":"published","published":"2023-08-29T06:30:14Z","modified":"2023-11-24T05:05:18Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:55:05.78804Z"}],"nvd":[{"id":"CVE-2023-41359","description":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.","status":"published","published":"2023-08-29T04:15:16.877Z","modified":"2026-06-17T06:21:58.067Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:25.025396Z"}],"osv":[{"id":"AZL-28615","title":"CVE-2023-41359 affecting package frr for versions less than 8.5.3-2","description":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.","status":"published","published":"2023-08-29T04:15:16Z","modified":"2026-04-21T04:25:54.078457Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"RHSA-2024:2156","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2024-09-16T14:56:13Z","modified":"2026-03-18T11:33:18.12979Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"ALSA-2024:2156","title":"Moderate: frr security update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nSecurity Fix(es):\n\n* frr: incorrect length check in bgp_capability_llgr() can lead do DoS (CVE-2023-31489)\n* frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490)\n* frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358)\n* frr: out of bounds read in bgp_attr_aigp_valid (CVE-2023-41359)\n* frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909)\n* frr: mishandled malformed data leading to a crash (CVE-2023-46752)\n* frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753)\n* frr: ahead-of-stream read of ORF header (CVE-2023-41360)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:42.652585922Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CVE-2023-41359","description":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.","status":"published","published":"2023-08-29T00:00:00Z","modified":"2026-10-30T02:45:18.339235473Z","updated_at":"2026-11-02T15:44:33.244128Z"}]}}