{"$schema":"https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json","document":{"category":"csaf_security_advisory","csaf_version":"2.1","title":"FRR Dynamic Routing Denial of Service Vulenrabilities","distribution":{"tlp":{"label":"CLEAR"}},"publisher":{"category":"vendor","name":"WatchGuard PSIRT","namespace":"https://www.watchguard.com"},"tracking":{"id":"WGSA-2023-00010","status":"final","version":"15","initial_release_date":"2023-12-15T15:48:48+00:00","current_release_date":"2026-07-28T00:55:16.768621+00:00","revision_history":[{"date":"2023-12-15T15:48:48+00:00","number":"15","summary":"Initial release."}]},"references":[{"summary":"vendor-advisory","url":"https://psirt.watchguard.com/WGSA-2023-00010"},{"summary":"cve","url":"https://www.cve.org/CVERecord?id=CVE-2023-38802"},{"summary":"cve","url":"https://www.cve.org/CVERecord?id=CVE-2023-41358"}],"notes":[{"category":"summary","text":"BGP software such as FRRRouting FRR and Quagga included as part of Fireware OS enable a remote attacker to incorrectly reset network sessions through an invalid BGP update. This vulnerability is only applicable to Firebox appliances with BGP routing features enabled.","title":"Summary"}]},"product_tree":{"branches":[{"category":"vendor","name":"WatchGuard","branches":[{"category":"product_name","name":"Fireware OS","branches":[{"category":"product_version_range","name":"vers >= 12.1.1, < 12.10.1","product":{"name":"Fireware OS vers >= 12.1.1, < 12.10.1","product_id":"CSAFPID-46ae0b14-8bdb-41f9-a57b-563a6e76c5c7"}}]}]}]},"vulnerabilities":[{"notes":[{"category":"description","text":"BGP software such as FRRRouting FRR and Quagga included as part of Fireware OS enable a remote attacker to incorrectly reset network sessions through an invalid BGP update. This vulnerability is only applicable to Firebox appliances with BGP routing features enabled.","title":"Summary"}],"product_status":{"known_affected":["CSAFPID-46ae0b14-8bdb-41f9-a57b-563a6e76c5c7"]},"cve":"CVE-2023-38802","remediations":[{"category":"vendor_fix","details":"Upgrade to Fireware OS 12.10.1 or later.","product_ids":["CSAFPID-46ae0b14-8bdb-41f9-a57b-563a6e76c5c7"]}]},{"notes":[{"category":"description","text":"BGP software such as FRRRouting FRR and Quagga included as part of Fireware OS enable a remote attacker to incorrectly reset network sessions through an invalid BGP update. This vulnerability is only applicable to Firebox appliances with BGP routing features enabled.","title":"Summary"}],"product_status":{"known_affected":["CSAFPID-46ae0b14-8bdb-41f9-a57b-563a6e76c5c7"]},"cve":"CVE-2023-41358","remediations":[{"category":"vendor_fix","details":"Upgrade to Fireware OS 12.10.1 or later.","product_ids":["CSAFPID-46ae0b14-8bdb-41f9-a57b-563a6e76c5c7"]}]}]}