CVE-2022-43681 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-43681 Interim 1 4 2023-10-13T23:14:47Z current 2023-05-04T23:18:37Z 2023-10-13T23:14:47Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-43681 An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 frr frr-devel libfrr0 libfrr_pb0 libfrrcares0 libfrrfpm_pb0 libfrrgrpc_pb0 libfrrospfapiclient0 libfrrsnmp0 libfrrzmq0 libmlag_pb0 frr as a component of SUSE Enterprise Storage 7.1 frr-devel as a component of SUSE Enterprise Storage 7.1 libfrr0 as a component of SUSE Enterprise Storage 7.1 libfrr_pb0 as a component of SUSE Enterprise Storage 7.1 libfrrcares0 as a component of SUSE Enterprise Storage 7.1 libfrrfpm_pb0 as a component of SUSE Enterprise Storage 7.1 libfrrgrpc_pb0 as a component of SUSE Enterprise Storage 7.1 libfrrospfapiclient0 as a component of SUSE Enterprise Storage 7.1 libfrrsnmp0 as a component of SUSE Enterprise Storage 7.1 libfrrzmq0 as a component of SUSE Enterprise Storage 7.1 libmlag_pb0 as a component of SUSE Enterprise Storage 7.1 frr as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS frr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrr0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrr_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrcares0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrgrpc_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrsnmp0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrzmq0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libmlag_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS frr as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS frr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrr0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrr_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrcares0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrgrpc_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrsnmp0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrzmq0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libmlag_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS frr as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 frr-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrr0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrr_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrcares0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrsnmp0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrzmq0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libmlag_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 frr as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 frr-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrr0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrr_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrcares0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrsnmp0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrzmq0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libmlag_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 frr as a component of SUSE Linux Enterprise Real Time 15 SP3 frr-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrr0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrr_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrcares0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrsnmp0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrzmq0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libmlag_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 frr as a component of SUSE Linux Enterprise Server 15 SP3-LTSS frr-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrr0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrr_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrcares0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrfpm_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrospfapiclient0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrsnmp0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrzmq0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libmlag_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS frr as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 frr-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrr0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrr_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrcares0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrsnmp0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrzmq0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libmlag_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 frr as a component of SUSE Manager Proxy 4.2 frr-devel as a component of SUSE Manager Proxy 4.2 libfrr0 as a component of SUSE Manager Proxy 4.2 libfrr_pb0 as a component of SUSE Manager Proxy 4.2 libfrrcares0 as a component of SUSE Manager Proxy 4.2 libfrrfpm_pb0 as a component of SUSE Manager Proxy 4.2 libfrrgrpc_pb0 as a component of SUSE Manager Proxy 4.2 libfrrospfapiclient0 as a component of SUSE Manager Proxy 4.2 libfrrsnmp0 as a component of SUSE Manager Proxy 4.2 libfrrzmq0 as a component of SUSE Manager Proxy 4.2 libmlag_pb0 as a component of SUSE Manager Proxy 4.2 frr as a component of SUSE Manager Retail Branch Server 4.2 frr-devel as a component of SUSE Manager Retail Branch Server 4.2 libfrr0 as a component of SUSE Manager Retail Branch Server 4.2 libfrr_pb0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrcares0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrfpm_pb0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrgrpc_pb0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrospfapiclient0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrsnmp0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrzmq0 as a component of SUSE Manager Retail Branch Server 4.2 libmlag_pb0 as a component of SUSE Manager Retail Branch Server 4.2 frr as a component of SUSE Manager Server 4.2 frr-devel as a component of SUSE Manager Server 4.2 libfrr0 as a component of SUSE Manager Server 4.2 libfrr_pb0 as a component of SUSE Manager Server 4.2 libfrrcares0 as a component of SUSE Manager Server 4.2 libfrrfpm_pb0 as a component of SUSE Manager Server 4.2 libfrrgrpc_pb0 as a component of SUSE Manager Server 4.2 libfrrospfapiclient0 as a component of SUSE Manager Server 4.2 libfrrsnmp0 as a component of SUSE Manager Server 4.2 libfrrzmq0 as a component of SUSE Manager Server 4.2 libmlag_pb0 as a component of SUSE Manager Server 4.2 An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an extended OPEN message), the FRR code reads of out of the bounds of the packet, throwing a SIGABRT signal and exiting. This results in a bgpd daemon restart, causing a Denial-of-Service condition. CVE-2022-43681 SUSE Enterprise Storage 7.1:frr SUSE Enterprise Storage 7.1:frr-devel SUSE Enterprise Storage 7.1:libfrr0 SUSE Enterprise Storage 7.1:libfrr_pb0 SUSE Enterprise Storage 7.1:libfrrcares0 SUSE Enterprise Storage 7.1:libfrrfpm_pb0 SUSE Enterprise Storage 7.1:libfrrgrpc_pb0 SUSE Enterprise Storage 7.1:libfrrospfapiclient0 SUSE Enterprise Storage 7.1:libfrrsnmp0 SUSE Enterprise Storage 7.1:libfrrzmq0 SUSE Enterprise Storage 7.1:libmlag_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:frr SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:frr-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrr0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrr_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrcares0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrfpm_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrgrpc_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrospfapiclient0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrsnmp0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrzmq0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libmlag_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:frr SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:frr-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrr0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrr_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrcares0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrfpm_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrgrpc_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrospfapiclient0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrsnmp0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrzmq0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libmlag_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:frr SUSE Linux Enterprise Module for Server Applications 15 SP4:frr-devel SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrr0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrr_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrcares0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrfpm_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrgrpc_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrospfapiclient0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrsnmp0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrzmq0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmlag_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrcares0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrfpm_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrospfapiclient0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrsnmp0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrzmq0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libmlag_pb0 SUSE Linux Enterprise Real Time 15 SP3:frr SUSE Linux Enterprise Real Time 15 SP3:frr-devel SUSE Linux Enterprise Real Time 15 SP3:libfrr0 SUSE Linux Enterprise Real Time 15 SP3:libfrr_pb0 SUSE Linux Enterprise Real Time 15 SP3:libfrrcares0 SUSE Linux Enterprise Real Time 15 SP3:libfrrfpm_pb0 SUSE Linux Enterprise Real Time 15 SP3:libfrrgrpc_pb0 SUSE Linux Enterprise Real Time 15 SP3:libfrrospfapiclient0 SUSE Linux Enterprise Real Time 15 SP3:libfrrsnmp0 SUSE Linux Enterprise Real Time 15 SP3:libfrrzmq0 SUSE Linux Enterprise Real Time 15 SP3:libmlag_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:frr SUSE Linux Enterprise Server 15 SP3-LTSS:frr-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libfrr0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrr_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrcares0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrfpm_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrgrpc_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrospfapiclient0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrsnmp0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrzmq0 SUSE Linux Enterprise Server 15 SP3-LTSS:libmlag_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:frr SUSE Linux Enterprise Server for SAP Applications 15 SP3:frr-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrr0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrr_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrcares0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrfpm_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrgrpc_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrospfapiclient0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrsnmp0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrzmq0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libmlag_pb0 SUSE Manager Proxy 4.2:frr SUSE Manager Proxy 4.2:frr-devel SUSE Manager Proxy 4.2:libfrr0 SUSE Manager Proxy 4.2:libfrr_pb0 SUSE Manager Proxy 4.2:libfrrcares0 SUSE Manager Proxy 4.2:libfrrfpm_pb0 SUSE Manager Proxy 4.2:libfrrgrpc_pb0 SUSE Manager Proxy 4.2:libfrrospfapiclient0 SUSE Manager Proxy 4.2:libfrrsnmp0 SUSE Manager Proxy 4.2:libfrrzmq0 SUSE Manager Proxy 4.2:libmlag_pb0 SUSE Manager Retail Branch Server 4.2:frr SUSE Manager Retail Branch Server 4.2:frr-devel SUSE Manager Retail Branch Server 4.2:libfrr0 SUSE Manager Retail Branch Server 4.2:libfrr_pb0 SUSE Manager Retail Branch Server 4.2:libfrrcares0 SUSE Manager Retail Branch Server 4.2:libfrrfpm_pb0 SUSE Manager Retail Branch Server 4.2:libfrrgrpc_pb0 SUSE Manager Retail Branch Server 4.2:libfrrospfapiclient0 SUSE Manager Retail Branch Server 4.2:libfrrsnmp0 SUSE Manager Retail Branch Server 4.2:libfrrzmq0 SUSE Manager Retail Branch Server 4.2:libmlag_pb0 SUSE Manager Server 4.2:frr SUSE Manager Server 4.2:frr-devel SUSE Manager Server 4.2:libfrr0 SUSE Manager Server 4.2:libfrr_pb0 SUSE Manager Server 4.2:libfrrcares0 SUSE Manager Server 4.2:libfrrfpm_pb0 SUSE Manager Server 4.2:libfrrgrpc_pb0 SUSE Manager Server 4.2:libfrrospfapiclient0 SUSE Manager Server 4.2:libfrrsnmp0 SUSE Manager Server 4.2:libfrrzmq0 SUSE Manager Server 4.2:libmlag_pb0 moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H