CVE-2022-36440 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-36440 Interim 1 5 2025-02-16T02:56:50Z current 2023-04-05T23:18:28Z 2025-02-16T02:56:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-36440 A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Liberty Linux 9 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 frr frr-8.3.1-11.el9_3 frr-devel frr-selinux-8.3.1-11.el9_3 libfrr0 libfrr_pb0 libfrrcares0 libfrrfpm_pb0 libfrrgrpc_pb0 libfrrospfapiclient0 libfrrsnmp0 libfrrzmq0 libmlag_pb0 frr-8.3.1-11.el9_3 as a component of SUSE Liberty Linux 9 frr-selinux-8.3.1-11.el9_3 as a component of SUSE Liberty Linux 9 frr as a component of SUSE Enterprise Storage 7.1 frr-devel as a component of SUSE Enterprise Storage 7.1 libfrr0 as a component of SUSE Enterprise Storage 7.1 libfrr_pb0 as a component of SUSE Enterprise Storage 7.1 libfrrcares0 as a component of SUSE Enterprise Storage 7.1 libfrrfpm_pb0 as a component of SUSE Enterprise Storage 7.1 libfrrgrpc_pb0 as a component of SUSE Enterprise Storage 7.1 libfrrospfapiclient0 as a component of SUSE Enterprise Storage 7.1 libfrrsnmp0 as a component of SUSE Enterprise Storage 7.1 libfrrzmq0 as a component of SUSE Enterprise Storage 7.1 libmlag_pb0 as a component of SUSE Enterprise Storage 7.1 frr as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS frr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrr0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrr_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrcares0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrgrpc_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrsnmp0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfrrzmq0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libmlag_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS frr as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS frr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrr0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrr_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrcares0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrgrpc_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrsnmp0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfrrzmq0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libmlag_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS frr as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 frr-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrr0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrr_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrcares0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrsnmp0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libfrrzmq0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libmlag_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 frr as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 frr-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrr0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrr_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrcares0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrsnmp0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libfrrzmq0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libmlag_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 frr as a component of SUSE Linux Enterprise Real Time 15 SP3 frr-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrr0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrr_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrcares0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrsnmp0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfrrzmq0 as a component of SUSE Linux Enterprise Real Time 15 SP3 libmlag_pb0 as a component of SUSE Linux Enterprise Real Time 15 SP3 frr as a component of SUSE Linux Enterprise Server 15 SP3-LTSS frr-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrr0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrr_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrcares0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrfpm_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrospfapiclient0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrsnmp0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfrrzmq0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libmlag_pb0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS frr as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 frr-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrr0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrr_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrcares0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrfpm_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrgrpc_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrospfapiclient0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrsnmp0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfrrzmq0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libmlag_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 frr as a component of SUSE Manager Proxy 4.2 frr-devel as a component of SUSE Manager Proxy 4.2 libfrr0 as a component of SUSE Manager Proxy 4.2 libfrr_pb0 as a component of SUSE Manager Proxy 4.2 libfrrcares0 as a component of SUSE Manager Proxy 4.2 libfrrfpm_pb0 as a component of SUSE Manager Proxy 4.2 libfrrgrpc_pb0 as a component of SUSE Manager Proxy 4.2 libfrrospfapiclient0 as a component of SUSE Manager Proxy 4.2 libfrrsnmp0 as a component of SUSE Manager Proxy 4.2 libfrrzmq0 as a component of SUSE Manager Proxy 4.2 libmlag_pb0 as a component of SUSE Manager Proxy 4.2 frr as a component of SUSE Manager Retail Branch Server 4.2 frr-devel as a component of SUSE Manager Retail Branch Server 4.2 libfrr0 as a component of SUSE Manager Retail Branch Server 4.2 libfrr_pb0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrcares0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrfpm_pb0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrgrpc_pb0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrospfapiclient0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrsnmp0 as a component of SUSE Manager Retail Branch Server 4.2 libfrrzmq0 as a component of SUSE Manager Retail Branch Server 4.2 libmlag_pb0 as a component of SUSE Manager Retail Branch Server 4.2 frr as a component of SUSE Manager Server 4.2 frr-devel as a component of SUSE Manager Server 4.2 libfrr0 as a component of SUSE Manager Server 4.2 libfrr_pb0 as a component of SUSE Manager Server 4.2 libfrrcares0 as a component of SUSE Manager Server 4.2 libfrrfpm_pb0 as a component of SUSE Manager Server 4.2 libfrrgrpc_pb0 as a component of SUSE Manager Server 4.2 libfrrospfapiclient0 as a component of SUSE Manager Server 4.2 libfrrsnmp0 as a component of SUSE Manager Server 4.2 libfrrzmq0 as a component of SUSE Manager Server 4.2 libmlag_pb0 as a component of SUSE Manager Server 4.2 A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS. CVE-2022-36440 SUSE Liberty Linux 9:frr-8.3.1-11.el9_3 SUSE Liberty Linux 9:frr-selinux-8.3.1-11.el9_3 SUSE Enterprise Storage 7.1:frr SUSE Enterprise Storage 7.1:frr-devel SUSE Enterprise Storage 7.1:libfrr0 SUSE Enterprise Storage 7.1:libfrr_pb0 SUSE Enterprise Storage 7.1:libfrrcares0 SUSE Enterprise Storage 7.1:libfrrfpm_pb0 SUSE Enterprise Storage 7.1:libfrrgrpc_pb0 SUSE Enterprise Storage 7.1:libfrrospfapiclient0 SUSE Enterprise Storage 7.1:libfrrsnmp0 SUSE Enterprise Storage 7.1:libfrrzmq0 SUSE Enterprise Storage 7.1:libmlag_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:frr SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:frr-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrr0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrr_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrcares0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrfpm_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrgrpc_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrospfapiclient0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrsnmp0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfrrzmq0 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libmlag_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:frr SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:frr-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrr0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrr_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrcares0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrfpm_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrgrpc_pb0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrospfapiclient0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrsnmp0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfrrzmq0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libmlag_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:frr SUSE Linux Enterprise Module for Server Applications 15 SP4:frr-devel SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrr0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrr_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrcares0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrfpm_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrgrpc_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrospfapiclient0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrsnmp0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfrrzmq0 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmlag_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP5:frr SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrcares0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrfpm_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrospfapiclient0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrsnmp0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrrzmq0 SUSE Linux Enterprise Module for Server Applications 15 SP5:libmlag_pb0 SUSE Linux Enterprise Real Time 15 SP3:frr SUSE Linux Enterprise Real Time 15 SP3:frr-devel SUSE Linux Enterprise Real Time 15 SP3:libfrr0 SUSE Linux Enterprise Real Time 15 SP3:libfrr_pb0 SUSE Linux Enterprise Real Time 15 SP3:libfrrcares0 SUSE Linux Enterprise Real Time 15 SP3:libfrrfpm_pb0 SUSE Linux Enterprise Real Time 15 SP3:libfrrgrpc_pb0 SUSE Linux Enterprise Real Time 15 SP3:libfrrospfapiclient0 SUSE Linux Enterprise Real Time 15 SP3:libfrrsnmp0 SUSE Linux Enterprise Real Time 15 SP3:libfrrzmq0 SUSE Linux Enterprise Real Time 15 SP3:libmlag_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:frr SUSE Linux Enterprise Server 15 SP3-LTSS:frr-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libfrr0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrr_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrcares0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrfpm_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrgrpc_pb0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrospfapiclient0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrsnmp0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfrrzmq0 SUSE Linux Enterprise Server 15 SP3-LTSS:libmlag_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:frr SUSE Linux Enterprise Server for SAP Applications 15 SP3:frr-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrr0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrr_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrcares0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrfpm_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrgrpc_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrospfapiclient0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrsnmp0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfrrzmq0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libmlag_pb0 SUSE Manager Proxy 4.2:frr SUSE Manager Proxy 4.2:frr-devel SUSE Manager Proxy 4.2:libfrr0 SUSE Manager Proxy 4.2:libfrr_pb0 SUSE Manager Proxy 4.2:libfrrcares0 SUSE Manager Proxy 4.2:libfrrfpm_pb0 SUSE Manager Proxy 4.2:libfrrgrpc_pb0 SUSE Manager Proxy 4.2:libfrrospfapiclient0 SUSE Manager Proxy 4.2:libfrrsnmp0 SUSE Manager Proxy 4.2:libfrrzmq0 SUSE Manager Proxy 4.2:libmlag_pb0 SUSE Manager Retail Branch Server 4.2:frr SUSE Manager Retail Branch Server 4.2:frr-devel SUSE Manager Retail Branch Server 4.2:libfrr0 SUSE Manager Retail Branch Server 4.2:libfrr_pb0 SUSE Manager Retail Branch Server 4.2:libfrrcares0 SUSE Manager Retail Branch Server 4.2:libfrrfpm_pb0 SUSE Manager Retail Branch Server 4.2:libfrrgrpc_pb0 SUSE Manager Retail Branch Server 4.2:libfrrospfapiclient0 SUSE Manager Retail Branch Server 4.2:libfrrsnmp0 SUSE Manager Retail Branch Server 4.2:libfrrzmq0 SUSE Manager Retail Branch Server 4.2:libmlag_pb0 SUSE Manager Server 4.2:frr SUSE Manager Server 4.2:frr-devel SUSE Manager Server 4.2:libfrr0 SUSE Manager Server 4.2:libfrr_pb0 SUSE Manager Server 4.2:libfrrcares0 SUSE Manager Server 4.2:libfrrfpm_pb0 SUSE Manager Server 4.2:libfrrgrpc_pb0 SUSE Manager Server 4.2:libfrrospfapiclient0 SUSE Manager Server 4.2:libfrrsnmp0 SUSE Manager Server 4.2:libfrrzmq0 SUSE Manager Server 4.2:libmlag_pb0 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H