{"id":"USN-7230-3","summary":"frr regression","details":"USN-7230-2 fixed vulnerabilities in FRR. Unfortunately, the fix for\nCVE-2024-55553 introduced a regression in RPKI support, causing FRR to stop\nprocessing RPKI updates after the first one, so routes were not revalidated\nwhen RPKI data changed. In Ubuntu 20.04 LTS, the BGP daemon also failed to\nstart when the RPKI module was enabled. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Iggy Frankovic discovered that FRR incorrectly handled certain BGP\n messages. A remote attacker could possibly use this issue to cause FRR to\n crash, resulting in a denial of service. This issue only affected Ubuntu\n 20.04 LTS. (CVE-2024-44070)\n\n It was discovered that FRR re-validated all routes in certain instances\n when the internal socket's buffer size overflowed. A remote attacker could\n possibly use this issue to impact the performance of FRR, resulting in a\n denial of service. (CVE-2024-55553)","modified":"2026-11-06T01:13:07.568186958Z","published":"2026-11-05T13:39:13Z","related":["UBUNTU-CVE-2024-55553"],"upstream":["CVE-2024-55553","UBUNTU-CVE-2024-55553"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7230-3"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-55553"},{"type":"REPORT","url":"https://launchpad.net/bugs/2172964"}],"affected":[{"package":{"name":"frr","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/frr?arch=source&distro=esm-apps%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-1ubuntu0.2+esm5"}]}],"versions":["6.0.2-2build2","7.2-1ubuntu1","7.2-1ubuntu2","7.2.1-1","7.2.1-1ubuntu0.1","7.2.1-1ubuntu0.2","7.2.1-1ubuntu0.2+esm1","7.2.1-1ubuntu0.2+esm2","7.2.1-1ubuntu0.2+esm3","7.2.1-1ubuntu0.2+esm4"],"ecosystem_specific":{"binaries":[{"binary_version":"7.2.1-1ubuntu0.2+esm5","binary_name":"frr"},{"binary_name":"frr-pythontools","binary_version":"7.2.1-1ubuntu0.2+esm5"},{"binary_version":"7.2.1-1ubuntu0.2+esm5","binary_name":"frr-rpki-rtrlib"},{"binary_version":"7.2.1-1ubuntu0.2+esm5","binary_name":"frr-snmp"}],"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"cves":[{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2024-55553"}],"ecosystem":"Ubuntu:Pro:20.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7230-3.json"}},{"package":{"name":"frr","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/frr?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1-1ubuntu1.17"}]}],"versions":["7.5.1-1.1","8.1-1","8.1-1ubuntu1","8.1-1ubuntu1.1","8.1-1ubuntu1.2","8.1-1ubuntu1.3","8.1-1ubuntu1.4","8.1-1ubuntu1.5","8.1-1ubuntu1.6","8.1-1ubuntu1.7","8.1-1ubuntu1.8","8.1-1ubuntu1.9","8.1-1ubuntu1.10","8.1-1ubuntu1.11","8.1-1ubuntu1.13","8.1-1ubuntu1.14","8.1-1ubuntu1.15","8.1-1ubuntu1.16"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"8.1-1ubuntu1.17","binary_name":"frr"},{"binary_version":"8.1-1ubuntu1.17","binary_name":"frr-pythontools"},{"binary_name":"frr-rpki-rtrlib","binary_version":"8.1-1ubuntu1.17"},{"binary_name":"frr-snmp","binary_version":"8.1-1ubuntu1.17"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7230-3.json","cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2024-55553"}],"ecosystem":"Ubuntu:22.04:LTS"}}},{"package":{"name":"frr","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/frr?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.4-1.1ubuntu6.8"}]}],"versions":["8.4.4-1.1ubuntu1","8.4.4-1.1ubuntu3","8.4.4-1.1ubuntu4","8.4.4-1.1ubuntu5","8.4.4-1.1ubuntu6","8.4.4-1.1ubuntu6.1","8.4.4-1.1ubuntu6.2","8.4.4-1.1ubuntu6.3","8.4.4-1.1ubuntu6.4","8.4.4-1.1ubuntu6.5","8.4.4-1.1ubuntu6.6","8.4.4-1.1ubuntu6.7"],"ecosystem_specific":{"binaries":[{"binary_name":"frr","binary_version":"8.4.4-1.1ubuntu6.8"},{"binary_name":"frr-pythontools","binary_version":"8.4.4-1.1ubuntu6.8"},{"binary_name":"frr-rpki-rtrlib","binary_version":"8.4.4-1.1ubuntu6.8"},{"binary_version":"8.4.4-1.1ubuntu6.8","binary_name":"frr-snmp"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-55553","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:24.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7230-3.json"}}],"schema_version":"1.9.2"}