FRR regression
USN-7230-2 fixed vulnerabilities in FRR. Unfortunately, the fix for CVE-2024-55553 introduced a regression in RPKI support, causing FRR to stop processing RPKI updates after the first one, so routes were not revalidated when RPKI data changed. In Ubuntu 20.04 LTS, the BGP daemon also failed to start when the RPKI module was enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Iggy Frankovic discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2024-44070) It was discovered that FRR re
Read at Ubuntu Security Notices
- Vendor
- Canonical
- Product
- Ubuntu
- Exposure class
- Operating system
Why it ranks 34 (Notable)
- Product class: operating system
- Widely deployed vendor product (Canonical)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2024-55553 on this site · NVD · CVE.org · Vulnpedia
- CVE-2024-44070 on this site · NVD · CVE.org · Vulnpedia