Frrouting Frr vulnerabilities

• frrouting frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses CVE-2026-119776 Fix available 6.1 MediumNovember 4, 2026
• frrouting Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable... CVE-2026-37458 Fix available 6.5 MediumMay 4, 2026
• frrouting, red hat enterprise linux 10, enterprise linux 8 +1 more +3 more An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd... CVE-2026-37457 Fix available 7.5 HighMay 1, 2026
• frrouting frr, frrouting +1 more FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions CVE-2026-28532 Fix available 6.0 MediumApril 30, 2026
• frrouting frr, frrouting +1 more FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control CVE-2026-5107 Fix available 2.3 LowMarch 30, 2026
• frrouting FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61107 Fix available 7.5 HighOctober 28, 2025
• frrouting FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61106 Fix available 7.5 HighOctober 28, 2025
• frrouting FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61104 Fix available 7.5 HighOctober 28, 2025
• frrouting FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61103 Fix available 7.5 HighOctober 28, 2025
• frrouting FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61105 Fix available 7.5 HighOctober 27, 2025
• frrouting FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61102 Fix available 7.5 HighOctober 27, 2025
• frrouting FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61101 Fix available 7.5 HighOctober 27, 2025
• frrouting FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61100 Fix available 7.5 HighOctober 27, 2025
• frrouting FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via... CVE-2025-61099 Fix available 7.5 HighOctober 27, 2025
• frrouting, redhat enterprise linux +1 more An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does... CVE-2024-44070 Fix available 7.5 HighAugust 19, 2024
• frrouting In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the... CVE-2024-34088 Fix available 7.5 HighApril 30, 2024
• frrouting In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer... CVE-2024-31951 Fix available 6.5 MediumApril 7, 2024
• frrouting In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in... CVE-2024-31950 Fix available 6.5 MediumApril 7, 2024
• frrouting In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a... CVE-2024-31949 Fix available 6.5 MediumApril 7, 2024
• frrouting In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP... CVE-2024-31948 Fix available 6.5 MediumApril 7, 2024
• frrouting ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to... CVE-2024-27913 Fix available 6.5 MediumFebruary 28, 2024
• frrouting bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream... CVE-2023-38407 Fix available 7.5 HighNovember 6, 2023
• frrouting bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a ... CVE-2023-38406 Fix available 9.8 CriticalNovember 6, 2023
• frrouting An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP... CVE-2023-47235 Fix available 7.5 HighNovember 3, 2023
• frrouting An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a... CVE-2023-47234 Fix available 7.5 HighNovember 3, 2023
• frrouting An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP... CVE-2023-46753 Fix available 5.9 MediumOctober 26, 2023
• frrouting An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI... CVE-2023-46752 Fix available 5.9 MediumOctober 26, 2023
• frrouting, debian linux, fedoraproject fedora +2 more An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd... CVE-2023-41909 Fix available 7.5 HighSeptember 5, 2023
• frrouting, debian linux +1 more An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large... CVE-2023-41361 Fix available 9.8 CriticalAugust 29, 2023
• frrouting, debian linux, fedoraproject fedora +2 more An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte... CVE-2023-41360 Fix available 9.1 CriticalAugust 29, 2023
• frrouting, fedoraproject fedora +1 more An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in... CVE-2023-41359 Fix available 9.1 CriticalAugust 29, 2023
• frrouting, debian linux, fedoraproject fedora +2 more An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the... CVE-2023-41358 Fix available 7.5 HighAugust 29, 2023
• frrouting, pica8 picos, debian linux +1 more +3 more FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial... CVE-2023-38802 Fix available 7.5 HighAugust 28, 2023
• frrouting, fedora, red hat enterprise linux 8 +1 more +3 more Inifinite loop in babld message parsing may cause dos CVE-2023-3748 Fix available 3.5 LowJuly 24, 2023
• frrouting, debian linux, fedoraproject fedora +2 more An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service... CVE-2023-31490 Fix available 7.5 HighMay 9, 2023
• frrouting, fedoraproject fedora +1 more An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service... CVE-2023-31489 Fix available 5.5 MediumMay 9, 2023
• frrouting, debian linux +1 more An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a... CVE-2022-43681 Fix available 6.5 MediumMay 3, 2023
• frrouting, debian linux +1 more An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message... CVE-2022-40318 Fix available 6.5 MediumMay 3, 2023
• frrouting, debian linux +1 more An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message... CVE-2022-40302 Fix available 6.5 MediumMay 3, 2023
• frrouting, debian linux, fedoraproject fedora +2 more A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability... CVE-2022-36440 Fix available 7.5 HighApril 3, 2023
• frrouting In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root... CVE-2022-42917 Fix available 6.7 MediumNovember 18, 2022
• frrouting, debian linux +1 more An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation... CVE-2022-37032 Public exploitFix available 9.1 CriticalSeptember 12, 2022
• frrouting An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and... CVE-2022-37035 Fix available 8.1 HighAugust 2, 2022
• frrouting Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the... CVE-2022-26129 Fix available 7.8 HighMarch 3, 2022
• frrouting A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the... CVE-2022-26128 Fix available 7.8 HighMarch 3, 2022
• frrouting A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the... CVE-2022-26127 Fix available 7.8 HighMarch 3, 2022
• frrouting, fedoraproject fedora +1 more Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a... CVE-2022-26126 Fix available 7.8 HighMarch 3, 2022
• frrouting Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input... CVE-2022-26125 Fix available 7.8 HighMarch 3, 2022
• frrouting bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x... CVE-2019-5892 6.5 MediumJanuary 10, 2019
• frrouting bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3... CVE-2017-15865 Fix available 7.5 HighNovember 8, 2017