ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4090-1 advisory.

    Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for:

    - CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950,       CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234,       CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360,       CVE-2023-41358,CVE-2023-38802,CVE-2023-38407,CVE-2023-38406,       CVE-2023-3748,CVE-2023-31490,CVE-2023-31489 and other bugfixes.
      See https://frrouting.org/release/8.5.6/ for details.

    The most recent frr 8.x series provides several new features,     improvements and bug fixes for various protocols and daemons,     especially for PIM/PIMv6/BGP and VRF support.

    See https://frrouting.org/release/8.5/ for details and links.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27913 advisory.

  - ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a     denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to     a missing attribute field. (CVE-2024-27913)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1453-1 advisory.

  - ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a     denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to     a missing attribute field. (CVE-2024-27913)

  - In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet     can cause the bgpd daemon to crash. (CVE-2024-31948)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6679-1 advisory.

    It was discovered that FRR incorrectly handled certain malformed OSPF LSA packets. A remote attacker could     possibly use this issue to cause FRR to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
212585	SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2024:4090-1)	Nessus	SuSE Local Security Checks	critical
207027	CBL Mariner 2.0 Security Update: frr (CVE-2024-27913)	Nessus	MarinerOS Local Security Checks	medium
194456	SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2024:1453-1)	Nessus	SuSE Local Security Checks	medium
191638	Ubuntu 22.04 LTS / 23.10 : FRR vulnerability (USN-6679-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2024-27913

medium

Tenable Plugins

critical

medium

medium

medium