{"id":"CVE-2026-37460","aliases":["ALSA-2026:49511","ALSA-2026:49527","ALSA-2026:49607","CLSA-2026-1786035720","CLSA-2026-1786095204","DEBIAN-CVE-2026-37460","EUVD-2026-34083","GHSA-4ph9-3c4q-r2hh","RHSA-2026:24347","RHSA-2026:49511","RHSA-2026:49527","RHSA-2026:49607","RLSA-2026:49511","RLSA-2026:49527","RLSA-2026:49607","UBUNTU-CVE-2026-37460"],"status":"published","title":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable...","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00335,"percentile":0.27016,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2026-06-03T00:00:00Z","modified":"2026-10-29T11:32:22Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"frr","fixed_in":["7.5.1-25.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"frr-selinux","fixed_in":["7.5.1-25.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"frr","fixed_in":["8.5.3-15.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"frr-selinux","fixed_in":["8.5.3-15.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"frr10","fixed_in":["10.4.3-3.el9_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"frr10-selinux","fixed_in":["10.4.3-3.el9_8.2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"frr","fixed_in":["8.3.1-5.el9_2.2.alma.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"frr-selinux","fixed_in":["8.3.1-5.el9_2.2.alma.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"frr","fixed_in":["10.6.1-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr","fixed_in":["0:7.5.1-25.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debuginfo","fixed_in":["0:7.5.1-25.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debugsource","fixed_in":["0:7.5.1-25.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-selinux","fixed_in":["0:7.5.1-25.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr","fixed_in":["0:8.5.3-15.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debuginfo","fixed_in":["0:8.5.3-15.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debugsource","fixed_in":["0:8.5.3-15.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-selinux","fixed_in":["0:8.5.3-15.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10","fixed_in":["0:10.4.3-3.el9_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10-debuginfo","fixed_in":["0:10.4.3-3.el9_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10-debugsource","fixed_in":["0:10.4.3-3.el9_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10-selinux","fixed_in":["0:10.4.3-3.el9_8.2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"frr","fixed_in":["0:7.5.1-25.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"frr","fixed_in":["0:8.5.3-15.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"frr10","fixed_in":["0:10.4.3-3.el9_8.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","fixed_in":["7.2.1-1ubuntu0.2+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"frr","fixed_in":["8.1-1ubuntu1.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"frr","fixed_in":["8.4.4-1.1ubuntu6.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"frr","fixed_in":["10.4.1-3ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-25.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.1-25.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-15.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-15.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.3-3.el9_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"frr10-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.3-3.el9_8.2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-5.el9_2.2.alma.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-5.el9_2.2.alma.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-9.el9_6.1.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.3-9.el9_6.1.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0-0.1","10.0-0.2","10.0-1","10.0-2","10.0.1-0.1","10.1-0.1","10.1-0.2","10.1.1-0.1","10.1.1-1","10.1.1-2","10.1.1-3","10.2-1","10.2-2","10.2.1-1","10.2.1-2","10.2.1-3","10.2.1-4","10.2.1-5","10.2.1-6","10.3-1","10.3-2","10.3-3","10.3-4","10.3-5","10.3.1-1","10.3.1-2","10.3.1-3","10.3.1-4","10.4.0-1","10.4.1-1","10.4.1-2","10.4.1-3","10.5.0-1","10.5.0-2","10.5.1-1","10.5.1-2","10.5.1-3","10.5.2-1","10.5.3-1","10.6.0-1","10.6.0-2","10.6.1-1","10.6.1-2","10.6.1-3","10.7.0-1","10.7.0-2","10.7.1-1","10.7.1-2","10.7.1-3","8.4.2-1","8.4.4-1","8.4.4-1.1","8.4.4-1.1~deb12u1","8.4.4-1.1~deb12u2","9.1-0.1"]},{"source":"osv","ecosystem":"Debian:13","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.3-3","10.3-3+deb13u1","10.3-4","10.3-5","10.3.1-1","10.3.1-2","10.3.1-3","10.3.1-4","10.4.0-1","10.4.1-1","10.4.1-2","10.4.1-3","10.5.0-1","10.5.0-2","10.5.1-1","10.5.1-2","10.5.1-3","10.5.2-1","10.5.3-1","10.6.0-1","10.6.0-2","10.6.1-1","10.6.1-2","10.6.1-3","10.7.0-1","10.7.0-2","10.7.1-1","10.7.1-2","10.7.1-3"]},{"source":"osv","ecosystem":"Debian:14","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6.1-1"}]}],"versions":["10.3-3","10.3-4","10.3-5","10.3.1-1","10.3.1-2","10.3.1-3","10.3.1-4","10.4.0-1","10.4.1-1","10.4.1-2","10.4.1-3","10.5.0-1","10.5.0-2","10.5.1-1","10.5.1-2","10.5.1-3","10.5.2-1","10.5.3-1","10.6.0-1","10.6.0-2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.4-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.4-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.4-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.4-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-25.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-25.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-25.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-25.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-15.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-15.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-15.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-15.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.3-3.el9_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.3-3.el9_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.3-3.el9_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"frr10-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.3-3.el9_8.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.1-25.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.3-15.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"frr10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.3-3.el9_8.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.24.1-2","0.99.24.1-2ubuntu1","0.99.24.1-2ubuntu1.1","0.99.24.1-2ubuntu1.2","0.99.24.1-2ubuntu1.3","0.99.24.1-2ubuntu1.4","0.99.24.1-2ubuntu1.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-3","1.1.1-3ubuntu1","1.2.2-1","1.2.2-1ubuntu1","1.2.4-1","1.2.4-1ubuntu0.1~esm1","1.2.4-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.4-4build1","1.2.4-4ubuntu0.1","1.2.4-4ubuntu0.4","1.2.4-4ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-1ubuntu0.2+esm4"}]}],"versions":["6.0.2-2build2","7.2-1ubuntu1","7.2-1ubuntu2","7.2.1-1","7.2.1-1ubuntu0.1","7.2.1-1ubuntu0.2","7.2.1-1ubuntu0.2+esm1","7.2.1-1ubuntu0.2+esm2","7.2.1-1ubuntu0.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1-1ubuntu1.15"}]}],"versions":["7.5.1-1.1","8.1-1","8.1-1ubuntu1","8.1-1ubuntu1.1","8.1-1ubuntu1.2","8.1-1ubuntu1.3","8.1-1ubuntu1.4","8.1-1ubuntu1.5","8.1-1ubuntu1.6","8.1-1ubuntu1.7","8.1-1ubuntu1.8","8.1-1ubuntu1.9","8.1-1ubuntu1.10","8.1-1ubuntu1.11","8.1-1ubuntu1.13","8.1-1ubuntu1.14"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.4-1.1ubuntu6.6"}]}],"versions":["8.4.4-1.1ubuntu1","8.4.4-1.1ubuntu3","8.4.4-1.1ubuntu4","8.4.4-1.1ubuntu5","8.4.4-1.1ubuntu6","8.4.4-1.1ubuntu6.1","8.4.4-1.1ubuntu6.2","8.4.4-1.1ubuntu6.3","8.4.4-1.1ubuntu6.4","8.4.4-1.1ubuntu6.5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"frr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.1-3ubuntu1.2"}]}],"versions":["10.2.1-1ubuntu3","10.3-3ubuntu2","10.4.1-3ubuntu1","10.4.1-3ubuntu1.1"]}],"references":[{"url":"https://github.com/FRRouting/frr/pull/21098%2C","tags":["fix","article"]},{"url":"https://github.com/FRRouting/frr","tags":["package","article"]},{"url":"https://github.com/FRRouting/frr/commit/7676cad65114aa23adde58","tags":["fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-37460","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4ph9-3c4q-r2hh"},{"url":"https://access.redhat.com/errata/RHSA-2026:49511","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-37460","tags":["report"]},{"url":"https://bugzilla.redhat.com/2484385","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-49511.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49527","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-49527.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49607","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-49607.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786035720.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786095204.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/37xxx/CVE-2026-37460.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-37460","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24347","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466513","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-166035","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24347.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-37457","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-37457","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-37457","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/commit/0e6882bc72c0278988a47b2f0f73b7a91099a25c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-37459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-37459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-37459","tags":["advisory"]},{"url":"https://github.com/FRRouting/frr/commit/693a2e02687cdc9d16501275e05136edea9650d9","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-37460","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49511.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-176258","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49527.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-222338","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49607.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:49511","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:49527","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:49607","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-37460","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8175-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-37460","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","status":"published","published":"2026-06-03T00:00:00Z","modified":"2026-06-05T16:50:29.989Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T13:39:16.730222Z"}],"euvd":[{"id":"EUVD-2026-34083","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","status":"published","published":"2026-06-03T00:00:00Z","modified":"2026-06-05T16:50:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:50.934862Z"}],"ghsa":[{"id":"GHSA-4ph9-3c4q-r2hh","title":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable...","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","status":"published","published":"2026-06-03T15:30:42Z","modified":"2026-06-05T18:32:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:08:36.196175Z"}],"nvd":[{"id":"CVE-2026-37460","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","status":"published","published":"2026-06-03T14:16:42.897Z","modified":"2026-07-22T19:10:00.12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:12:22.022466Z"}],"osv":[{"id":"CVE-2026-37460","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","status":"published","published":"2026-06-03T00:00:00Z","modified":"2026-11-06T12:11:54.031066671Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-06T12:43:08.762989Z"},{"id":"DEBIAN-CVE-2026-37460","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","status":"published","published":"2026-06-03T14:16:42.897Z","modified":"2026-10-01T03:03:22.456723873Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.587575Z"},{"id":"RHSA-2026:24347","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2026-06-08T10:06:41Z","modified":"2026-08-04T10:19:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:49511","title":"Red Hat Security Advisory: frr security update","status":"published","published":"2026-08-04T10:26:40Z","modified":"2026-08-04T10:33:08.071984071Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:49527","title":"Red Hat Security Advisory: frr security, bug fix, and enhancement update","status":"published","published":"2026-08-03T10:17:42Z","modified":"2026-08-04T10:26:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:49607","title":"Red Hat Security Advisory: frr10 security, bug fix, and enhancement update","status":"published","published":"2026-08-04T10:26:53Z","modified":"2026-08-04T10:32:57.955308912Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RLSA-2026:49511","title":"Important: frr security update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nSecurity Fix(es):\n\n* frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-04T12:01:10.002138Z","modified":"2026-08-04T12:30:06.967048662Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:49527","title":"Important: frr security, bug fix, and enhancement update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. \n\nSecurity Fix(es):\n\n* frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)\n\nBug Fix(es) and Enhancement(s):\n\n* Zebra is not installing the route in the kernel after flapping one of the physical link on the ocp worker node. [rhel-9.8.z] (JIRA:Rocky Linux-152300)\n\n* frr triggers SELinux denials when reading root's Python site-packages directory on Rocky Linux-9 (JIRA:Rocky Linux-176258)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-04T12:03:54.895769Z","modified":"2026-08-04T12:30:06.966872177Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:49607","title":"Important: frr10 security, bug fix, and enhancement update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet.  FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.  FRRouting is a fork of Quagga.\n\nSecurity Fix(es):\n\n* frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)\n\nBug Fix(es) and Enhancement(s):\n\n* frr10 triggers SELinux denials when reading root's Python site-packages directory on Rocky Linux-9 (JIRA:Rocky Linux-222338)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-04T12:03:54.895769Z","modified":"2026-08-04T12:30:06.864301406Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-37460","description":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","status":"published","published":"2026-06-03T14:16:00Z","modified":"2026-06-16T00:53:09.907068744Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"ALSA-2026:49511","title":"Important: frr security update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.   \n\nSecurity Fix(es):  \n\n  * frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-03T00:00:00Z","modified":"2026-10-29T11:02:28.73927387Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:49527","title":"Important: frr security, bug fix, and enhancement update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.   \n\nSecurity Fix(es):  \n\n  * frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Zebra is not installing the route in the kernel after flapping one of the physical link on the ocp worker node. [almalinux-9.8.z] (JIRA:AlmaLinux-152300)\n  * frr triggers SELinux denials when reading root's Python site-packages directory on AlmaLinux-9 (JIRA:AlmaLinux-176258)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-03T00:00:00Z","modified":"2026-10-29T11:32:22.481814161Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:49607","title":"Important: frr10 security, bug fix, and enhancement update","description":"FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga.  \n\nSecurity Fix(es):  \n\n  * frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * frr10 triggers SELinux denials when reading root's Python site-packages directory on AlmaLinux-9 (JIRA:AlmaLinux-222338)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-03T00:00:00Z","modified":"2026-10-29T11:32:22.021130459Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"CLSA-2026-1786035720","title":"frr: Fix of CVE-2026-37460","description":"- CVE-2026-37460: validate RFPOPTION sub-TLV length before accessing its data","status":"published","published":"2026-08-06T17:02:11Z","modified":"2026-10-26T09:30:31.312058439Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786095204","title":"frr: Fix of CVE-2026-37460","description":"- CVE-2026-37460: fix missing input validation in the rfapiRibBi2Ri()\n  RFP-option parser (bgpd/rfapi/rfapi_rib.c) allowing a bgpd DoS via a\n  crafted BGP UPDATE with a short or zero-length VNC RFPOPTION subTLV.\n  Scoped to the rfapi_rib.c hunk of upstream 7676cad6 to match NVD, which\n  defines this CVE as rfapiRibBi2Ri() only; the same commit's bgp_evpn.c\n  and bgp_evpn_mh.c hunks belong to CVE-2026-5107 and are not included","status":"published","published":"2026-08-07T09:33:34Z","modified":"2026-10-26T09:31:26.050805981Z","updated_at":"2026-11-02T15:43:46.850893Z"}]}}