Date: Tue, 24 Sep 2024 15:52:15 GMT From: Olivier Cochard <olivier@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: dcfd8e16e174 - main - security/vuxml: document frr vulnerabilities Message-ID: <202409241552.48OFqFHG055392@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by olivier: URL: https://cgit.FreeBSD.org/ports/commit/?id=dcfd8e16e174aabe4f00c69fadf2471d255cece9 commit dcfd8e16e174aabe4f00c69fadf2471d255cece9 Author: Olivier Cochard <olivier@FreeBSD.org> AuthorDate: 2024-09-24 15:51:41 +0000 Commit: Olivier Cochard <olivier@FreeBSD.org> CommitDate: 2024-09-24 15:52:08 +0000 security/vuxml: document frr vulnerabilities --- security/vuxml/vuln/2024.xml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index 18dba4ae8557..6da5d9f51164 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -1,3 +1,35 @@ + <vuln vid="802961eb-7a89-11ef-bdd7-a0423f48a938"> + <topic>frr - BGP</topic> + <affects> + <package> + <name>frr9</name> + <range><lt>9.1.2</lt></range> + </package> + <package> + <name>frr8</name> + <range><lt>8.5.6</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>cve@mitre.org reports:</p> + <blockquote cite="https://github.com/FRRouting/frr/pull/16497">; + <p>An issue was discovered in FRRouting (FRR). bgp_attr_encap + in bgpd/bgp_attr.c does not check the actual remaining stream length + before taking the TLV value.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2024-44070</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2024-44070</url>; + </references> + <dates> + <discovery>2024-08-19</discovery> + <entry>2024-09-24</entry> + </dates> + </vuln> + <vuln vid="d47b7ae7-fe1d-4f7f-919a-480ca8035f00"> <topic>zeek -- potential DoS vulnerability</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202409241552.48OFqFHG055392>