Ubuntu fixes FRR RPKI regression in USN-7230-3
USN-7230-3 restores RPKI support in FRR after regression introduced by CVE-2024-55553 fix.
40
Vulnerability1 · 1 read
CVE-2024-44070
- CVSS 3.1
- 7.5 high
- EPSS
- <1%p49
- Published
- ·
- Modified
Description · NVD
An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.
- Products
- frrouting, enterprise linux
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H