FR
Product
FRRouting
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 28Medium 16Low 0
Watch
Add FRRouting to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-42917 | 6.7 | Sep 13 | In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files… Affected: before 4.5 |
| CVE-2026-37458 | 6.5 | May 4 | Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via… Affected: 10.0 through 10.6.0 |
| CVE-2026-28532 | 6.5 | Apr 30 | FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions Affected: before 10.5.3 |
| CVE-2024-31951 | 6.5 | Apr 7 | In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an… Affected: through 9.1 |
| CVE-2024-31950 | 6.5 | Apr 7 | In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their… Affected: through 9.1 |
| CVE-2024-31949 | 6.5 | Apr 7 | In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing Affected: through 9.1 |
| CVE-2024-31948 | 6.5 | Apr 7 | In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash Affected: through 9.1 |
| CVE-2024-27913 | 6.5 | Feb 28 | ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet,… Affected: before 9.0 |
| CVE-2022-43681 | 6.5 | May 3 | An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4 Affected: through 8.4 |
| CVE-2022-40318 | 6.5 | May 3 | An issue was discovered in bgpd in FRRouting (FRR) through 8.4 Affected: through 8.4 |
| CVE-2022-40302 | 6.5 | May 3 | An issue was discovered in bgpd in FRRouting (FRR) through 8.4 Affected: through 8.4 |
| CVE-2019-5892 | 6.5 | Jan 10 | bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affecting Cumulus Linux or VyOS), when… Affected: 2.0 through 2.0.2; 3.0 before 3.0.4; 5.0 before 5.0.2; 6.0 before 6.0.2; 4.0 |
| CVE-2023-46752 | 5.9 | Oct 26 | An issue was discovered in FRRouting FRR through 9.0.1 Affected: through 9.0.1 |
| CVE-2023-46753 | 5.9 | Oct 26 | An issue was discovered in FRRouting FRR through 9.0.1 Affected: through 9.0.1 |
| CVE-2023-31489 | 5.5 | May 9 | An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function Affected: 8.4.2 |
| CVE-2026-5107 | 4.2 | Mar 30 | FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control Affected: 10.5.0; 10.5.1 |
Showing 16