Skip to content
OpenAdvisories

Vendor

FRRouting

4 known vulnerabilities.

Products

frrouting 2 FRR 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-119776

    frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses

    In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not check that OSPFv3 packets have a link-local source address and either a link-local destination or one of the protocol multicast destination groups. This may enable mali…

    FRRouting frrouting frr frr Debian Ubuntu
  • Medium 6.7
    CVE-2022-42917

    In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the confi…

    FRRouting frrouting frr frr Debian Ubuntu
  • Medium 6.5
    CVE-2026-28532

    FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions

    FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop te…

    FRRouting FRR frr frr Debian Ubuntu
  • Medium 4.2
    CVE-2026-5107

    FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control

    A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated…

    FRRouting FRR frr frr Debian Ubuntu