frr

12 results · Clear filters · Feed

• Medium 6.1
  CVE-2026-119776

  frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses

  In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not check that OSPFv3 packets have a link-local source address and either a link-local destination or one of the protocol multicast destination groups. This may enable mali…

  FRRouting frrouting frr frr Debian Ubuntu
  Nov 4, 2026
• Medium 6.7
  CVE-2022-42917

  In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the confi…

  FRRouting frrouting frr frr Debian Ubuntu
  Sep 13, 2026
• Medium 6.5
  CVE-2026-37458

  Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authentica…

  frr frr quagga Debian Ubuntu
  May 4, 2026
• Medium 6.5
  CVE-2026-28532

  FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions

  FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop te…

  FRRouting FRR frr frr Debian Ubuntu
  Apr 30, 2026
• Medium 4.2
  CVE-2026-5107

  FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control

  A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated…

  FRRouting FRR frr frr Debian Ubuntu
  Mar 30, 2026
• Medium 6.5
  CVE-2024-31949

  In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability be…

  frr Debian
  Apr 7, 2024
• Medium 6.5
  CVE-2024-31950

  In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packet…

  frr frr Debian Ubuntu
  Apr 7, 2024
• Medium 6.5
  CVE-2024-31951

  In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash …

  frr frr Debian Ubuntu
  Apr 7, 2024
• Medium 6.5
  CVE-2024-31948

  In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the…

  frr frr Debian Ubuntu
  Apr 7, 2024
• Medium 6.2
  CVE-2024-27913

  ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service…

  frr frr Debian Ubuntu
  Feb 28, 2024
• Medium 6.8
  CVE-2023-47235

  An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an E…

  frr frr Debian Ubuntu
  Nov 3, 2023
• Medium 6.5
  CVE-2022-40302

  An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0…

  frr Debian
  May 3, 2023