drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in FRR
Name: |
Denial of Service in FRR |
|
ID: |
USN-6679-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 22.04 LTS, Ubuntu 23.10 |
|
Datum: |
Mi, 6. März 2024, 18:08 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27913 |
|
Applikationen: |
FRRouting |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============4029502519589088276== Content-Language: en-CA Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------eySjdpb5xWSmdDUL6RZaYxbf"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------eySjdpb5xWSmdDUL6RZaYxbf Content-Type: multipart/mixed; boundary="------------2A4Qk4JRt6nHFbcJfdHnb5B9"; protected-headers="v1" From: Marc Deslauriers <marc.deslauriers@canonical.com> Reply-To: Ubuntu Security <security@ubuntu.com> To: "ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com> Message-ID: <950195a2-30b0-4ea8-ba0c-f5dfb0a1811f@canonical.com> Subject: [USN-6679-1] FRR vulnerability
--------------2A4Qk4JRt6nHFbcJfdHnb5B9 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64
========================================================================== Ubuntu Security Notice USN-6679-1 March 06, 2024
frr vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.10 - Ubuntu 22.04 LTS
Summary:
FRR could be made to crash if it received specially crafted network traffic.
Software Description: - frr: FRRouting suite of internet protocols
Details:
It was discovered that FRR incorrectly handled certain malformed OSPF LSA packets. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.10: frr 8.4.4-1.1ubuntu1.3
Ubuntu 22.04 LTS: frr 8.1-1ubuntu1.9
In general, a standard system update will make all the necessary changes.
References: https://ubuntu.com/security/notices/USN-6679-1 CVE-2024-27913
Package Information: https://launchpad.net/ubuntu/+source/frr/8.4.4-1.1ubuntu1.3 https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.9
--------------2A4Qk4JRt6nHFbcJfdHnb5B9--
--------------eySjdpb5xWSmdDUL6RZaYxbf Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAmXoefMACgkQZWnYVadE vpNTow//drKI2ou3G50efer2u738zSJhCusZc9+a86vYcnHfuQ68vYgglEHB63z5 SzHD+oM4SD4XK09rTbTXBRt3ZhCt6/AQPLwpN/e2pHBRfRG12ta0ekO4UsUnhs1h slRFLPF519fUHCorfl0OvHpSJFrrJkxkFl9ChcXK6YlxPZJcDhiFzUe8mgS0BU4g DmJ0upXmTPwdcqlA2JDcQH9BtxY3WaP1v1YYlj3rGIIwVtYJaSld+l9wnY1Hb0Tp okMRR+U4COItZl39q7qDFjO5XqJTe6yeI2gyTSkjXKcrjWNz1yPdpk2gFNZfmdT4 RaeqcFZkGOiV1kkt/Bcl7xd1LxrK/0H8UD6emmvHv5FuyYkmvaIAk7X2NQBsw12Q 4vx0NGXDn7RxgB1kGtx2fUw0jiAcrNDLrf4Q1CB1npHT8aKJxcajKpFftn1/aCUW sjYRqvkOThuTVHkqmD44ISNVcRc7uqba7NKnwAxzwq6Iq0DGwy3rLqylgmOUaCUZ jLP6tnonWWERHmGSpoKTz9Zb2Qnvr0IESZ0+hsWwxcp4IoSnpQiJSoXZOkhdjS+l yzdHOFuFn9cfEz2y8c8R69kmEdQcTcA1adXbqw8gF0uRf42BKESirdsAcg7Dubi4 w3ZI60fm54zRXVD4kDlNRx01xz6y8o/tHc+IHPwVOdWoffWSmCc= =QXoS -----END PGP SIGNATURE-----
--------------eySjdpb5xWSmdDUL6RZaYxbf--
--===============4029502519589088276== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
Cg==
--===============4029502519589088276==--
|
|
|
|