Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-44070: FRRouting and RHEL BGP may read beyond data

CVE-2024-44070 · published 2 years ago

Summary

The BGP component in FRRouting (up to version 10.1) and its use on Red Hat Enterprise Linux can read more data than is actually present, potentially leading to crashes or unauthorized actions. This happens because the code does not verify the length of incoming information before processing it. Update to the latest FRRouting release or apply the vendor’s patch to ensure proper length checks.

What to do

Update debian frr to version 10.1-0.2.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	frrouting	frrouting	<= 10.1 `cpe:2.3:a:frrouting:frrouting::::::::`
–	redhat	enterprise_linux	8.0 9.0 `cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*`
Debian:12	debian	frr	All versions
Debian:13	debian	frr	< 10.1-0.2 Fix: upgrade to 10.1-0.2

Original advisory text

An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.

References

https://lists.debian.org/debian-lts-announce/2024/09/msg00007.html URL
https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44070... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-44070 Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2024-44070 Vendor Advisory
https://github.com/FRRouting/frr/pull/16497 Patch

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Timeline

Published19 Aug 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-44070 · NVD

CVE-2024-44070 · OSV

DEBIAN-CVE-2024-44070 · OSV

Track software like this

Free during beta