2024-11-26
ALT-BU-2024-16135-1
Branch sisyphus update bulletin.
Closed bugs
Оптимизировать список зависимостей (BuildRequires)
Closed vulnerabilities
Published: 2024-12-17
Modified: 2025-04-03
Modified: 2025-04-03
CVE-2024-52949
iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.
References:
Closed vulnerabilities
Published: 2024-08-18
BDU:2024-06868
Уязвимость функции bgp_attr_encap() в файле bgpd/bgp_attr.c программного средства реализации сетевой маршрутизации на Unix-подобных системах FRRouting, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2024-08-19
Modified: 2024-08-30
Modified: 2024-08-30
CVE-2024-44070
An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References: