{"id":"CVE-2023-47235","aliases":["ALSA-2024:0130","ALSA-2024:0477","AZL-31785","AZL-34691","CLSA-2025-1762420748","DEBIAN-CVE-2023-47235","DLA-3797-1","DLA-3865-1","EUVD-2023-51367","GHSA-5682-2jc3-w5j4","RHSA-2024:0130","RHSA-2024:0477","RHSA-2024:0574","RHSA-2024:1093","RHSA-2024:1113","RHSA-2024:1152","RLSA-2024:0130","SUSE-SU-2023:4663-1","SUSE-SU-2024:2245-1","SUSE-SU-2024:4090-1","UBUNTU-CVE-2023-47235","USN-6498-1","USN-6807-1","openSUSE-SU-2024:13487-1"],"status":"published","title":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP...","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00789,"percentile":0.56495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-11-03T00:00:00Z","modified":"2026-10-29T11:31:41Z","fixes":[{"ecosystem":"Azure Linux:2","package":"frr","fixed_in":["8.5.3-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"frr","fixed_in":["9.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"frr","fixed_in":["9.1-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"frr","fixed_in":["9.1-0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","fixed_in":["7.2.1-1ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"frr","fixed_in":["8.1-1ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"frr","fixed_in":["8.4.4-1.1ubuntu3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-13.el8_9.3.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-13.el8_9.3.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-11.el9_3.2.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-11.el9_3.2.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Azure Linux:2","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-5.el9.2.alma.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-5.el9.2.alma.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0-0.1","10.0-0.2","10.0-1","10.0-2","10.0.1-0.1","10.1-0.1","10.1-0.2","10.1.1-0.1","10.1.1-1","10.1.1-2","10.1.1-3","10.2-1","10.2-2","10.2.1-1","10.2.1-2","10.2.1-3","10.2.1-4","10.2.1-5","10.2.1-6","10.3-1","10.3-2","10.3-3","10.3-4","10.3-5","10.3.1-1","10.3.1-2","10.3.1-3","10.3.1-4","10.4.0-1","10.4.1-1","10.4.1-2","10.4.1-3","10.5.0-1","10.5.0-2","10.5.1-1","10.5.1-2","10.5.1-3","10.5.2-1","10.5.3-1","10.6.0-1","10.6.0-2","10.6.1-1","10.6.1-2","10.6.1-3","10.7.0-1","10.7.0-2","10.7.1-1","10.7.1-2","10.7.1-3","10.7.1-4","10.7.1-5","10.7.1-6","8.4.2-1","8.4.4-1","8.4.4-1.1","8.4.4-1.1~deb12u1","8.4.4-1.1~deb12u2","9.1-0.1"]},{"source":"osv","ecosystem":"Debian:13","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-0.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-1.1+deb10u2"}]}],"versions":["6.0.2-2","6.0.2-2+deb10u1","6.0.2-2+deb10u2","7.2-1","7.2.1-1","7.3.1-1","7.4-1","7.4-1.1","7.4-2","7.5-1","7.5.1-1","7.5.1-1.1","7.5.1-1.1+deb10u1"],"bundled":14},{"source":"osv","ecosystem":"Debian:11","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-1.1+deb11u3"}]}],"versions":["7.5.1-1.1","7.5.1-1.1+deb11u1","7.5.1-1.1+deb11u2"],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-13.el8_9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-13.el8_9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-13.el8_9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-13.el8_9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-11.el9_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-11.el9_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-11.el9_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-11.el9_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9_2.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9_2.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9_2.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9_2.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5-11.el8_6.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5-11.el8_6.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5-11.el8_6.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0-5.el9_0.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0-5.el9_0.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0-5.el9_0.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-13.el8_9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4-150500.4.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4-150500.4.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.6-150500.4.30.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.6-150500.4.30.1"}]}],"bundled":19},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.6-150500.4.30.1"}]}],"bundled":19},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.6-150500.4.30.1"}]}],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-1ubuntu0.2+esm2"}]}],"versions":["6.0.2-2build2","7.2-1ubuntu1","7.2-1ubuntu2","7.2.1-1","7.2.1-1ubuntu0.1","7.2.1-1ubuntu0.2","7.2.1-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1-1ubuntu1.8"}]}],"versions":["7.5.1-1.1","8.1-1","8.1-1ubuntu1","8.1-1ubuntu1.1","8.1-1ubuntu1.2","8.1-1ubuntu1.3","8.1-1ubuntu1.4","8.1-1ubuntu1.5","8.1-1ubuntu1.6","8.1-1ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.4-1.1ubuntu3"}]}],"versions":["8.4.4-1.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1-1ubuntu1.8"}]}],"versions":["7.5.1-1.1","8.1-1","8.1-1ubuntu1","8.1-1ubuntu1.1","8.1-1ubuntu1.2","8.1-1ubuntu1.3","8.1-1ubuntu1.4","8.1-1ubuntu1.5","8.1-1ubuntu1.6","8.1-1ubuntu1.7"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-1ubuntu0.2+esm2"}]}],"versions":["6.0.2-2build2","7.2-1ubuntu1","7.2-1ubuntu2","7.2.1-1","7.2.1-1ubuntu0.1","7.2.1-1ubuntu0.2","7.2.1-1ubuntu0.2+esm1"],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4-8.1"}]}],"bundled":4}],"products":[{"vendor":"frrouting","product":"frrouting"}],"references":[{"url":"https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b","tags":["x_transferred","Patch","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00007.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47235","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5682-2jc3-w5j4"},{"url":"https://access.redhat.com/errata/RHSA-2024:0130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38406","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38407","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-47234","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-47235","tags":["report"]},{"url":"https://bugzilla.redhat.com/2248207","tags":["report"]},{"url":"https://bugzilla.redhat.com/2248208","tags":["report"]},{"url":"https://bugzilla.redhat.com/2248526","tags":["report"]},{"url":"https://bugzilla.redhat.com/2248528","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0130.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0477","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-0477.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762420748.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47235.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-47235","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248528","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0130.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38406","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/pull/12884","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38407","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/pull/12951","tags":["article"]},{"url":"https://github.com/FRRouting/frr/pull/12956","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-47234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47234","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-47235","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0477.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0574","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0574.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1093","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1093.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1113","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1113.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1152","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1152.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0130","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234663-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216896","tags":["report"]},{"url":"https://bugzilla.suse.com/1216897","tags":["report"]},{"url":"https://bugzilla.suse.com/1216899","tags":["report"]},{"url":"https://bugzilla.suse.com/1216900","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47235","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242245-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244090-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44070","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-47235","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6498-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6807-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-38406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-47234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-31490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-31948","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-47235","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T00:00:00Z","modified":"2025-11-04T16:10:43.864Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:35:14.298866Z"}],"euvd":[{"id":"EUVD-2023-51367","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T00:00:00Z","modified":"2025-11-04T16:10:43Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:28.888576Z"}],"ghsa":[{"id":"GHSA-5682-2jc3-w5j4","title":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP...","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T21:30:25Z","modified":"2025-11-04T18:31:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:34.447716Z"}],"nvd":[{"id":"CVE-2023-47235","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T21:15:17.47Z","modified":"2026-06-17T06:32:25.71Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:43.669554Z"}],"osv":[{"id":"AZL-31785","title":"CVE-2023-47235 affecting package frr for versions less than 8.5.3-4","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T21:15:17Z","modified":"2026-04-21T04:26:31.228725Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34691","title":"CVE-2023-47235 affecting package frr for versions less than 9.1-2","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T21:15:17Z","modified":"2026-04-21T04:34:18.862182Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"CVE-2023-47235","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T00:00:00Z","modified":"2026-10-28T02:30:47.543045024Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-47235","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T21:15:17.47Z","modified":"2026-10-26T18:02:58.502023353Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"RHSA-2024:0130","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2024-09-16T15:00:43Z","modified":"2026-03-18T11:34:12.971718Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0477","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2024-09-16T15:00:56Z","modified":"2026-03-18T11:34:28.686722Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0574","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2024-09-16T15:01:07Z","modified":"2026-03-18T11:34:31.378755Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:1093","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2024-09-16T15:01:17Z","modified":"2026-03-18T11:34:45.668223Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1113","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2024-09-16T15:01:27Z","modified":"2026-03-18T11:32:21.345969Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1152","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2024-09-16T15:01:38Z","modified":"2026-03-18T11:32:22.802441Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"UBUNTU-CVE-2023-47235","description":"An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.","status":"published","published":"2023-11-03T21:15:00Z","modified":"2026-02-04T02:51:04.11692Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2024:0130","title":"Moderate: frr security update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nSecurity Fix(es):\n\n* ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)\n* ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)\n* frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)\n* frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-10T00:00:00Z","modified":"2026-10-29T11:02:27.361668197Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:0477","title":"Moderate: frr security update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nSecurity Fix(es):\n\n* ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)\n* ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)\n* frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)\n* frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-25T00:00:00Z","modified":"2026-10-29T11:31:41.023530529Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1762420748","title":"frr: Fix of 4 CVEs","description":"- CVE-2023-41358: fix crash when processing NLRIs with zero\n  attribute length\n- CVE-2023-47235: fix EOR handling to avoid unwanted processing of\n  malformed attributes\n- CVE-2023-46753: fix mandatory attributes check for UPDATE messages\n  with unknown transit attributes\n- CVE-2023-47234: fix handling NLRIs when MP_UNREACH_NLRI received\n  without mandatory attributes","status":"published","published":"2025-11-06T09:19:11Z","modified":"2026-10-21T10:45:32.698851293Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-3797-1","title":"frr - security update","status":"published","published":"2024-04-28T00:00:00Z","modified":"2026-03-09T01:19:39.807356Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-3865-1","title":"frr - security update","status":"published","published":"2024-09-03T00:00:00Z","modified":"2026-03-09T01:21:47.488772Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2024:13487-1","title":"frr-8.4-8.1 on GA media","description":"These are all security issues fixed in the frr-8.4-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:39:20.338107Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:0130","title":"Moderate: frr security update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nSecurity Fix(es):\n\n* ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)\n\n* ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)\n\n* frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)\n\n* frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-12T19:57:06.01479Z","modified":"2026-02-04T23:00:02.346775Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:4663-1","title":"Security update for frr","description":"This update for frr fixes the following issues:\n\n- CVE-2023-47235: Fixed denial of service caused by malformed BGP UPDATE message with an EOR is processed (bsc#1216896).\n- CVE-2023-47234: Fixed denial of service caused by crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute (bsc#1216897).\n- CVE-2023-38407: Fixed read beyond the end of the stream during labeled unicast parsing (bsc#1216899).\n- CVE-2023-38406: Fixed mishandling of nlri length of zero, aka a 'flowspec overflow (bsc#1216900).\n","status":"published","published":"2023-12-06T12:27:39Z","modified":"2026-02-04T04:30:46.390756Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:2245-1","title":"Security update for frr","description":"This update for frr fixes the following issues:\n\n- CVE-2023-38406: Fixed nlri length of zero mishandling, aka 'flowspec overflow'. (bsc#1216900)\n- CVE-2023-47235: Fixed a crash on malformed BGP UPDATE message with an EOR, because the presence of EOR does not lead to a treat-as-withdraw outcome. (bsc#1216896)\n- CVE-2023-47234: Fixed a crash on crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data. (bsc#1216897)\n- CVE-2023-38407: Fixed attempts to read beyond the end of the stream during labeled unicast parsing. (bsc#1216899)\n","status":"published","published":"2024-06-28T11:20:05Z","modified":"2026-02-04T03:25:01.427245Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:4090-1","title":"Security update for frr","description":"This update for frr fixes the following issues:\n\nUpdate to frr 8.5.6 (jsc#PED-PED-11092) including fixes for:\n\n- CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950,\n  CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234,\n  CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360,\n  CVE-2023-41358,CVE-2023-38802,CVE-2023-38407,CVE-2023-38406,\n  CVE-2023-3748,CVE-2023-31490,CVE-2023-31489 and other bugfixes.\n  See https://frrouting.org/release/8.5.6/ for details.\n\nThe most recent frr 8.x series provides several new features,\nimprovements and bug fixes for various protocols and daemons,\nespecially for PIM/PIMv6/BGP and VRF support.\n\nSee https://frrouting.org/release/8.5/ for details and links.\n","status":"published","published":"2024-11-28T07:57:59Z","modified":"2026-02-04T04:12:19.142034Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"USN-6498-1","title":"frr vulnerabilities","description":"It was discovered that FRR incorrectly handled certain BGP messages. A\nremote attacker could possibly use this issue to cause FRR to crash,\nresulting in a denial of service.\n","status":"published","published":"2023-11-21T15:24:30Z","modified":"2026-02-10T04:43:26Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6807-1","title":"frr vulnerabilities","description":"It was discovered that FRR incorrectly handled certain network traffic.\nA remote attacker could possibly use this issue to cause FRR to crash,\nresulting in a denial of service. (CVE-2022-26126, CVE-2022-26127,\nCVE-2022-26128, CVE-2022-26129, CVE-2022-37032, CVE-2022-37035,\nCVE-2023-31490, CVE-2023-38406, CVE-2023-38407, CVE-2023-46752,\nCVE-2023-46753, CVE-2023-47234, CVE-2023-47235, CVE-2024-31948)\n\nBen Cartwright-Cox discovered that FRR incorrectly handled certain\nnetwork traffic. A remote attacker could possibly use this issue to cause\nFRR to crash, resulting in a denial of service. (CVE-2023-38802)\n","status":"published","published":"2024-06-05T17:19:09Z","modified":"2026-04-27T17:32:34.157755463Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}