{"id":"CVE-2022-37032","aliases":["ALSA-2023:2202","ALSA-2023:2801","DEBIAN-CVE-2022-37032","DLA-3211-1","DSA-5362-1","EUVD-2022-39686","GHSA-mxrw-2vpr-fpwr","RHSA-2023:2202","RHSA-2023:2801","SUSE-SU-2022:3246-1","SUSE-SU-2024:3426-1","SUSE-SU-2024:3433-1","SUSE-SU-2024:3478-1","UBUNTU-CVE-2022-37032","USN-5685-1","USN-6482-1","USN-6807-1","openSUSE-SU-2024:12307-1"],"status":"published","title":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation...","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02212,"percentile":0.82842,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-125"],"published":"2022-09-12T07:02:12Z","modified":"2026-11-03T08:03:03Z","exploits":[{"source":"pocgithub","id":"spwpun/CVE-2022-37032","title":"spwpun/CVE-2022-37032","date":"2023-02-20","url":"https://github.com/spwpun/CVE-2022-37032"}],"fixes":[{"ecosystem":"AlmaLinux:9","package":"frr","fixed_in":["8.3.1-5.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"frr-selinux","fixed_in":["8.3.1-5.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"frr","fixed_in":["7.5.1-7.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"frr-selinux","fixed_in":["7.5.1-7.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"frr","fixed_in":["8.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"frr","fixed_in":["8.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"frr","fixed_in":["8.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"frr","fixed_in":["6.0.2-2+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"frr","fixed_in":["7.5.1-1.1+deb11u1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr","fixed_in":["0:8.3.1-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debuginfo","fixed_in":["0:8.3.1-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debugsource","fixed_in":["0:8.3.1-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-selinux","fixed_in":["0:8.3.1-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr","fixed_in":["0:7.5.1-7.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debuginfo","fixed_in":["0:7.5.1-7.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debugsource","fixed_in":["0:7.5.1-7.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-selinux","fixed_in":["0:7.5.1-7.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"quagga","fixed_in":["1.2.4-4ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","fixed_in":["7.2.1-1ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"frr","fixed_in":["8.1-1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-5.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-5.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-7.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-7.el8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-2+deb10u2"}]}],"versions":["6.0.2-2","6.0.2-2+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-1.1+deb11u1"}]}],"versions":["7.5.1-1.1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.3.1-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-7.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-150300.4.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150400.12.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.24.1-2","0.99.24.1-2ubuntu1","0.99.24.1-2ubuntu1.1","0.99.24.1-2ubuntu1.2","0.99.24.1-2ubuntu1.3","0.99.24.1-2ubuntu1.4","0.99.24.1-2ubuntu1.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-3","1.1.1-3ubuntu1","1.2.2-1","1.2.2-1ubuntu1","1.2.4-1","1.2.4-1ubuntu0.1~esm1","1.2.4-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-4ubuntu0.4"}]}],"versions":["1.2.4-4build1","1.2.4-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-1ubuntu0.2+esm2"}]}],"versions":["6.0.2-2build2","7.2-1ubuntu1","7.2-1ubuntu2","7.2.1-1","7.2.1-1ubuntu0.1","7.2.1-1ubuntu0.2","7.2.1-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1-1ubuntu1.2"}]}],"versions":["7.5.1-1.1","8.1-1","8.1-1ubuntu1","8.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1-1ubuntu1.2"}]}],"versions":["7.5.1-1.1","8.1-1","8.1-1ubuntu1","8.1-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-4ubuntu0.4"}]}],"versions":["1.2.4-4build1","1.2.4-4ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-1ubuntu0.2+esm2"}]}],"versions":["6.0.2-2build2","7.2-1ubuntu1","7.2-1ubuntu2","7.2.1-1","7.2.1-1ubuntu0.1","7.2.1-1ubuntu0.2","7.2.1-1ubuntu0.2+esm1"],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1-5.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"frrouting","product":"frrouting"}],"references":[{"url":"https://github.com/FRRouting/frr/commit/ff6db1027f8f36df657ff2e5ea167773752537ed","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/FRRouting/frr/commit/6d58272b4cf96f0daa846210dd2104877900f921","tags":["x_transferred","Patch","fix"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1202023","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00039.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2023/dsa-5362","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37032","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mxrw-2vpr-fpwr"},{"url":"https://access.redhat.com/errata/RHSA-2023:2202","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-37032","tags":["report"]},{"url":"https://bugzilla.redhat.com/2128713","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2202.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2801","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2801.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37032.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-37032","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2147522","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2202.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37032","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149171","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2801.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223246-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202022","tags":["report"]},{"url":"https://bugzilla.suse.com/1202023","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37032","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243426-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1069468","tags":["report"]},{"url":"https://bugzilla.suse.com/1079798","tags":["report"]},{"url":"https://bugzilla.suse.com/1079799","tags":["report"]},{"url":"https://bugzilla.suse.com/1079800","tags":["report"]},{"url":"https://bugzilla.suse.com/1079801","tags":["report"]},{"url":"https://bugzilla.suse.com/1229438","tags":["report"]},{"url":"https://bugzilla.suse.com/1230866","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44070","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243433-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243478-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-37032","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5685-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6482-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6807-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-37035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-31490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-47234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-47235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-31948","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-37032","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","status":"published","published":"2022-09-19T00:00:00Z","modified":"2024-08-03T10:21:32.494Z","updated_at":"2026-11-02T14:34:26.977054Z"}],"euvd":[{"id":"EUVD-2022-39686","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","status":"published","published":"2022-09-19T00:00:00Z","modified":"2024-08-03T10:21:32Z","updated_at":"2026-11-03T03:25:24.099928Z"}],"ghsa":[{"id":"GHSA-mxrw-2vpr-fpwr","title":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation...","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","status":"published","published":"2022-09-20T00:00:21Z","modified":"2023-02-27T06:30:24Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:54:14.106206Z"}],"nvd":[{"id":"CVE-2022-37032","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","status":"published","published":"2022-09-19T22:15:11.367Z","modified":"2026-06-17T04:54:30.297Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:28.118799Z"}],"osv":[{"id":"DEBIAN-CVE-2022-37032","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","status":"published","published":"2022-09-19T22:15:11.367Z","modified":"2026-11-03T08:03:03.78097128Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"RHSA-2023:2202","title":"Red Hat Security Advisory: frr security, bug fix, and enhancement update","status":"published","published":"2024-09-16T09:26:13Z","modified":"2025-11-22T12:49:07Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2801","title":"Red Hat Security Advisory: frr security and bug fix update","status":"published","published":"2024-09-16T09:26:22Z","modified":"2025-11-22T12:49:58Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"UBUNTU-CVE-2022-37032","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","status":"published","published":"2022-09-19T22:15:00Z","modified":"2026-02-04T04:32:32.573271Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2023:2202","title":"Moderate: frr security, bug fix, and enhancement update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nThe following packages have been upgraded to a later upstream version: frr (8.3.1). (BZ#2129731)\n\nSecurity Fix(es):\n\n* frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service (CVE-2022-37032)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:54.561763205Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2801","title":"Moderate: frr security and bug fix update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nSecurity Fix(es):\n\n* frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service (CVE-2022-37032)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:04.397121159Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-37032","description":"An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.","status":"published","published":"2022-09-19T00:00:00Z","modified":"2026-10-28T10:28:24.532445602Z","updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DLA-3211-1","title":"frr - security update","status":"published","published":"2022-11-28T00:00:00Z","modified":"2026-03-09T01:19:12.826908Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5362-1","title":"frr - security update","status":"published","published":"2023-02-24T00:00:00Z","modified":"2026-03-09T02:08:32.012514Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:12307-1","title":"frr-8.1-5.1 on GA media","description":"These are all security issues fixed in the frr-8.1-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:17:56.840866Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:3246-1","title":"Security update for frr","description":"This update for frr fixes the following issues:\n\n- CVE-2022-37032: Fixed out-of-bounds read in the BGP daemon that may lead to information disclosure or denial of service (bsc#1202023).\n- CVE-2019-25074: Fixed a memory leak in the IS-IS daemon that may lead to server memory exhaustion (bsc#1202022).\n","status":"published","published":"2022-09-12T07:02:12Z","modified":"2026-02-04T04:27:31.879998Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2024:3426-1","title":"Security update for quagga","description":"This update for quagga fixes the following issues:\n\n- CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. (bsc#1230866)\n- CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. (bsc#1229438)\n- CVE-2022-37032: out-of-bounds read when parsing a BGP capability message due to incorrect size check. (bsc#1202023)\n\nBug fixes:\n- References to /var/adm/fillup-templates replaced with new %_fillupdir macro. (bsc#1069468)\n","status":"published","published":"2024-09-24T16:42:36Z","modified":"2026-02-04T03:38:36.649013Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3433-1","title":"Security update for quagga","description":"This update for quagga fixes the following issues:\n\n- CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. (bsc#1230866)\n- CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. (bsc#1229438)\n- CVE-2022-37032: out-of-bounds read when parsing a BGP capability message due to incorrect size check. (bsc#1202023)\n","status":"published","published":"2024-09-25T08:08:19Z","modified":"2026-02-04T03:10:51.974999Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3478-1","title":"Security update for quagga","description":"This update for quagga fixes the following issues:\n\n- CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. (bsc#1230866)\n- CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. (bsc#1229438)\n- CVE-2022-37032: out-of-bounds read when parsing a BGP capability message due to incorrect size check. (bsc#1202023)\n","status":"published","published":"2024-09-27T13:23:44Z","modified":"2026-02-04T04:14:52.9606Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"USN-5685-1","title":"frr vulnerabilities","description":"It was discovered that FRR incorrectly handled parsing certain BGP\nmessages. A remote attacker could possibly use this issue to cause FRR to\ncrash, resulting in a denial of service. (CVE-2022-37032)\n\nIt was discovered that FRR incorrectly handled processing certain BGP\nmessages. A remote attacker could possibly use this issue to cause FRR to\ncrash, resulting in a denial of service, obtain sensitive information,\nor execute arbitrary code. (CVE-2022-37035)\n","status":"published","published":"2022-10-18T14:04:39Z","modified":"2026-04-27T16:32:23.289948693Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-6482-1","title":"quagga vulnerabilities","description":"It was discovered that Quagga incorrectly handled certain BGP messages. A\nremote attacker could possibly use this issue to cause Quagga to crash,\nresulting in a denial of service.\n","status":"published","published":"2023-11-15T14:24:42Z","modified":"2026-04-27T16:57:31.0513Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6807-1","title":"frr vulnerabilities","description":"It was discovered that FRR incorrectly handled certain network traffic.\nA remote attacker could possibly use this issue to cause FRR to crash,\nresulting in a denial of service. (CVE-2022-26126, CVE-2022-26127,\nCVE-2022-26128, CVE-2022-26129, CVE-2022-37032, CVE-2022-37035,\nCVE-2023-31490, CVE-2023-38406, CVE-2023-38407, CVE-2023-46752,\nCVE-2023-46753, CVE-2023-47234, CVE-2023-47235, CVE-2024-31948)\n\nBen Cartwright-Cox discovered that FRR incorrectly handled certain\nnetwork traffic. A remote attacker could possibly use this issue to cause\nFRR to crash, resulting in a denial of service. (CVE-2023-38802)\n","status":"published","published":"2024-06-05T17:19:09Z","modified":"2026-04-27T17:32:34.157755463Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}