Skip to content
OpenAdvisories
Unscored USN-5685-1 2 CVEs

frr vulnerabilities

Published Oct 18, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FRR incorrectly handled parsing certain BGP
messages. A remote attacker could possibly use this issue to cause FRR to
crash, resulting in a denial of service. (CVE-2022-37032)

It was discovered that FRR incorrectly handled processing certain BGP
messages. A remote attacker could possibly use this issue to cause FRR to
crash, resulting in a denial of service, obtain sensitive information,
or execute arbitrary code. (CVE-2022-37035)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS frr 8.1-1ubuntu1.2

Vulnerabilities 2

  • Unscored —
    CVE-2022-37032 Public exploit

    An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of serv…

    frr frr quagga Debian Ubuntu
  • Unscored —
    CVE-2022-37035

    An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_…

    frr frr Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-37032
  • report
    https://ubuntu.com/security/CVE-2022-37035