USN-6432-1: Quagga vulnerabilities
17 October 2023
Several security issues were fixed in Quagga.
- quagga - BGP/OSPF/RIP routing daemon
It was discovered that the Quagga BGP daemon did not properly check the
attribute length in NRLI. A remote attacker could possibly use this issue
to cause a denial of service. (CVE-2023-41358)
It was discovered that the Quagga BGP daemon did not properly manage memory
when reading initial bytes of ORF header. A remote attacker could possibly
use this issue to cause a denial of service. (CVE-2023-41360)
The problem can be corrected by updating your system to the following package versions:
After a standard system update you need to restart Quagga to make
all the necessary changes.
- USN-6436-1: frr-rpki-rtrlib, frr-pythontools, frr-doc, frr-snmp, frr