Debian/frr: critical 9.8

bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."

Action: Upgrade frr to 8.4.4-1.1~deb12u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2023-38406
• https://security-tracker.debian.org/tracker/CVE-2023-38406

published 2023-11-06T06:15:40.850Z · modified 2026-10-23T18:04:25.504786174Z · JSON