CVE-2024-44070 Denial of service in n/a
Attackers can cause a denial of service in FRRouting by sending malformed BGP attributes that bypass length checks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-44070?
CVE-2024-44070 is a critical denial of service vulnerability in Redhat Enterprise Linux, published on 19 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.
Which versions are affected by CVE-2024-44070?
It affects 2 products.
Linux distribution packages (15)
frr SUSE:Enterprise Storage 7.1 | All versions | 7.4-150300.4.29.1 |
frr SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | All versions | 7.4-150300.4.29.1 |
frr SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 7.4-150300.4.29.1 |
frr SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 7.4-150300.4.29.1 |
frr SUSE:Linux Enterprise Module for Server Applications 15 SP5 | All versions | 8.4-150500.4.26.1 |
frr SUSE:Linux Enterprise Module for Server Applications 15 SP6 | All versions | 8.4-150500.4.26.1 |
frr SUSE:Linux Enterprise Server 15 SP3-LTSS | All versions | 7.4-150300.4.29.1 |
frr SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 7.4-150300.4.29.1 |
frr SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | All versions | 7.4-150300.4.29.1 |
frr SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 7.4-150300.4.29.1 |
frr SUSE:Manager Proxy 4.3 | All versions | 7.4-150300.4.29.1 |
frr SUSE:Manager Server 4.3 | All versions | 7.4-150300.4.29.1 |
frr openSUSE:Leap 15.5 | All versions | 8.4-150500.4.26.1 |
frr openSUSE:Leap 15.6 | All versions | 8.4-150500.4.26.1 |
frr openSUSE:Tumbleweed | All versions | 10.0.1-2.1 |
Products include Frrouting Frrouting, Redhat Enterprise Linux.
How do I fix CVE-2024-44070?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-44070 being exploited?
There is no known exploitation of CVE-2024-44070 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
- CVE-2023-38406 bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
- CVE-2022-37035 Use after free in n/a
- CVE-2022-26127 Memory corruption in FRRouting
- CVE-2022-26128 Memory corruption in FRRouting
- CVE-2022-26129 Memory corruption in FRRouting
Sources
Also known as AZL-47862, AZL-47868, CLSA-2025-1738265190, DEBIAN-CVE-2024-44070, GHSA-88xw-q94w-q9mr, SUSE-SU-2024:3090-1 and 6 more.