{
  "fix": "SUSE-SU-2024:4090-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4090-1",
  "summary": "SUSE-SU-2024:4090-1, released November 28, 2024, fixes 19 CVEs in frr (version 8.5.6-150500.4.30.1). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "frr security update",
  "released": "2024-11-28T07:57:59Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2023-41360, rated Critical",
  "supported": true,
  "cveCount": 19,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02376,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2024:4090-1",
  "appliesTo": [
    {
      "product": "frr",
      "productUrl": "https://patchblox.com/security/product/linux/frr",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "8.5.6-150500.4.30.1",
      "supported": true
    },
    {
      "product": "frr",
      "productUrl": "https://patchblox.com/security/product/linux/frr",
      "release": "sles 15.6",
      "fixedVersion": "8.5.6-150500.4.30.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-41360",
      "url": "https://patchblox.com/security/cve/CVE-2023-41360",
      "title": "frr: An issue was discovered in FRRouting FRR through 9.0",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.01153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-38802",
      "url": "https://patchblox.com/security/cve/CVE-2023-38802",
      "title": "frr: CVE-2023-41358, ,CVE-2023-38407,CVE-2023-38406",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.02376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-31490",
      "url": "https://patchblox.com/security/cve/CVE-2023-31490",
      "title": "frr: An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.02152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-41358",
      "url": "https://patchblox.com/security/cve/CVE-2023-41358",
      "title": "frr: An issue was discovered in FRRouting FRR through 9.0",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.01253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-38406",
      "url": "https://patchblox.com/security/cve/CVE-2023-38406",
      "title": "frr: CVE-2023-41358,CVE-2023-38802,CVE-2023-38407",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 9.8,
      "epss": 0.01129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-38407",
      "url": "https://patchblox.com/security/cve/CVE-2023-38407",
      "title": "frr: bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond theend of the stream during labeled unicast pa...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-41909",
      "url": "https://patchblox.com/security/cve/CVE-2023-41909",
      "title": "frr: CVE-2023-46753,CVE-2023-46752, ,CVE-2023-41360",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.5,
      "epss": 0.01119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-47234",
      "url": "https://patchblox.com/security/cve/CVE-2023-47234",
      "title": "frr: An issue was discovered in FRRouting FRR through 9.0.1",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-46752",
      "url": "https://patchblox.com/security/cve/CVE-2023-46752",
      "title": "frr: An issue was discovered in FRRouting FRR through 9.0.1",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.0102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-46753",
      "url": "https://patchblox.com/security/cve/CVE-2023-46753",
      "title": "frr: An issue was discovered in FRRouting FRR through 9.0.1",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00943,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-47235",
      "url": "https://patchblox.com/security/cve/CVE-2023-47235",
      "title": "frr: An issue was discovered in FRRouting FRR through 9.0.1",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3748",
      "url": "https://patchblox.com/security/cve/CVE-2023-3748",
      "title": "frr: CVE-2023-31490,CVE-2023-31489 and other bugfixes.",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00772,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-34088",
      "url": "https://patchblox.com/security/cve/CVE-2024-34088",
      "title": "frr: CVE-2024-44070, ,CVE-2024-31951,CVE-2024-31950",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00689,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44070",
      "url": "https://patchblox.com/security/cve/CVE-2024-44070",
      "title": "frr-snmp: An issue was discovered in FRRouting (FRR) through 10.1",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00641,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-31489",
      "url": "https://patchblox.com/security/cve/CVE-2023-31489",
      "title": "frr: An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.01027,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-31948",
      "url": "https://patchblox.com/security/cve/CVE-2024-31948",
      "title": "frr: In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SIDattribute in a BGP UPDATE packet can cause th...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00825,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-31951",
      "url": "https://patchblox.com/security/cve/CVE-2024-31951",
      "title": "frr: CVE-2024-44070,CVE-2024-34088, ,CVE-2024-31950",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0054,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-31950",
      "url": "https://patchblox.com/security/cve/CVE-2024-31950",
      "title": "frr: CVE-2024-44070,CVE-2024-34088,CVE-2024-31951",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00509,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27913",
      "url": "https://patchblox.com/security/cve/CVE-2024-27913",
      "title": "frr: CVE-2024-31948, ,CVE-2023-47235,CVE-2023-47234",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}