Headline
Ubuntu Security Notice USN-6794-1
Ubuntu Security Notice 6794-1 - It was discovered that FRR incorrectly handled certain malformed BGP and OSPF packets. A remote attacker could use this issue to cause FRR to crash, resulting in a denial of service, or possibly execute arbitrary code.
==========================================================================Ubuntu Security Notice USN-6794-1May 28, 2024frr vulnerabilities==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 24.04 LTS- Ubuntu 23.10- Ubuntu 22.04 LTSSummary:Several security issues were fixed in FRR.Software Description:- frr: FRRouting suite of internet protocolsDetails:It was discovered that FRR incorrectly handled certain malformed BGP andOSPF packets. A remote attacker could use this issue to cause FRR to crash,resulting in a denial of service, or possibly execute arbitrary code.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 24.04 LTS frr 8.4.4-1.1ubuntu6.1Ubuntu 23.10 frr 8.4.4-1.1ubuntu1.4Ubuntu 22.04 LTS frr 8.1-1ubuntu1.10In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-6794-1 CVE-2024-31948, CVE-2024-31950, CVE-2024-31951, CVE-2024-34088Package Information: https://launchpad.net/ubuntu/+source/frr/8.4.4-1.1ubuntu6.1 https://launchpad.net/ubuntu/+source/frr/8.4.4-1.1ubuntu1.4 https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.10