CVE-2022-37035

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and...

8.1 HighFix available

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

2.65%Down 1.3 points since Aug 3, 2022

What each source reports

NVD Score used 8.1

Record: CVE-2022-37035
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

CVE List No score

Record: CVE-2022-37035
Updated: 2026-11-02

EUVDEUVD-2022-39689 No score

Record: EUVD-2022-39689
Updated: 2026-11-02

GitHub AdvisoriesGHSA-rg6w-grg6-5wqf 8.1

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and...

Record: GHSA-rg6w-grg6-5wqf
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-37035 8.1

Record: DEBIAN-CVE-2022-37035
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVUBUNTU-CVE-2022-37035 8.1

Record: UBUNTU-CVE-2022-37035
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSV No score

Record: CVE-2022-37035
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12516-1 No score

frr-8.4-1.1 on GA media

These are all security issues fixed in the frr-8.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12516-1
Updated: 2026-11-02

OSVSUSE-SU-2022:4130-1 No score

Security update for frr

This update for frr fixes the following issues:

CVE-2022-37035: Fixed a possible use-after-free due to a race condition related to bgp_notify_send_with_data() and bgp_process_packet() (bsc#1202085).
CVE-2022-42917: Fixed a privilege escalation from frr to root in frr config creation (bsc#1204124).

Record: SUSE-SU-2022:4130-1
Updated: 2026-11-02

OSVUSN-5685-1 No score

frr vulnerabilities

It was discovered that FRR incorrectly handled parsing certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2022-37032)

It was discovered that FRR incorrectly handled processing certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service, obtain sensitive information, or execute arbitrary code. (CVE-2022-37035)

Record: USN-5685-1
Updated: 2026-11-02

OSVUSN-6807-1 No score

frr vulnerabilities

It was discovered that FRR incorrectly handled certain network traffic. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2022-26126, CVE-2022-26127, CVE-2022-26128, CVE-2022-26129, CVE-2022-37032, CVE-2022-37035, CVE-2023-31490, CVE-2023-38406, CVE-2023-38407, CVE-2023-46752, CVE-2023-46753, CVE-2023-47234, CVE-2023-47235, CVE-2024-31948)

Ben Cartwright-Cox discovered that FRR incorrectly handled certain network traffic. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2023-38802)

Record: USN-6807-1
Updated: 2026-11-02

Affected products

frrouting

Affected packages

Affected packages
Package	Affected	Fixed
`frr` Debian:12	before 8.4.1-1	8.4.1-1
`frr` Debian:13	before 8.4.1-1	8.4.1-1
`frr` Debian:14	before 8.4.1-1	8.4.1-1
`frr` Debian:10 From an advisory covering 14 CVEs	before 7.5.1-1.1+deb10u2, plus listed versions 6.0.2-26.0.2-2+deb10u16.0.2-2+deb10u27.2-17.2.1-1 Show 8 moreShow less 7.3.1-17.4-17.4-1.17.4-27.5-17.5.1-17.5.1-1.17.5.1-1.1+deb10u1	7.5.1-1.1+deb10u2
`frr` Debian:11 From an advisory covering 16 CVEs	before 7.5.1-1.1+deb11u3, plus listed versions 7.5.1-1.17.5.1-1.1+deb11u17.5.1-1.1+deb11u2	7.5.1-1.1+deb11u3
`frr` SUSE:Linux Enterprise Module for Server Applications 15 SP3 From an advisory covering 2 CVEs	before 7.4-150300.4.10.1	7.4-150300.4.10.1
`frr` SUSE:Linux Enterprise Module for Server Applications 15 SP4 From an advisory covering 2 CVEs	before 7.4-150300.4.10.1	7.4-150300.4.10.1
`frr` openSUSE:Leap 15.3 From an advisory covering 2 CVEs	before 7.4-150300.4.10.1	7.4-150300.4.10.1
`frr` openSUSE:Leap 15.4 From an advisory covering 2 CVEs	before 7.4-150300.4.10.1	7.4-150300.4.10.1
`frr` Ubuntu:Pro:20.04:LTS	before 7.2.1-1ubuntu0.2+esm2, plus listed versions 6.0.2-2build27.2-1ubuntu17.2-1ubuntu27.2.1-17.2.1-1ubuntu0.17.2.1-1ubuntu0.27.2.1-1ubuntu0.2+esm1	7.2.1-1ubuntu0.2+esm2

Show 4 moreShow less

Affected packages
Package	Affected	Fixed
`frr` Ubuntu:22.04:LTS	before 8.1-1ubuntu1.2, plus listed versions 7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.1	8.1-1ubuntu1.2
`frr` Ubuntu:22.04:LTS From an advisory covering 2 CVEs	before 8.1-1ubuntu1.2, plus listed versions 7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.1	8.1-1ubuntu1.2
`frr` Ubuntu:Pro:20.04:LTS From an advisory covering 15 CVEs	before 7.2.1-1ubuntu0.2+esm2, plus listed versions 6.0.2-2build27.2-1ubuntu17.2-1ubuntu27.2.1-17.2.1-1ubuntu0.17.2.1-1ubuntu0.27.2.1-1ubuntu0.2+esm1	7.2.1-1ubuntu0.2+esm2
`frr` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 8.4-1.1	8.4-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-37035 is a high vulnerability (CVSS 8.1) in Frrouting, published August 2, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. Fixed in frr 8.4.1-1.

References

Show 25 moreShow less