Yi Zhao fc9c8a3332 frr: Security fix CVE-2022-37035 ...

CVE-2022-37035:
An issue was discovered in bgpd in FRRouting (FRR) 8.3. In
bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c,
there is a possible use-after-free due to a race condition. This could
lead to Remote Code Execution or Information Disclosure by sending
crafted BGP packets. User interaction is not needed for exploitation.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-37035

Patch from:
https://github.com/FRRouting/frr/commit/71ca5b09bc71e8cbe38177cf41e83fe164e52eee

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>

2022-09-25 11:00:46 -04:00

..

frr

frr: Security fix CVE-2022-37035

2022-09-25 11:00:46 -04:00

frr_8.2.2.bb

frr: Security fix CVE-2022-37035

2022-09-25 11:00:46 -04:00