FR
Product
FRRouting
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 28Medium 16Low 0
Watch
Add FRRouting to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-37035 | 8.1 | Aug 2 | An issue was discovered in bgpd in FRRouting (FRR) 8.3 Affected: 8.3 |
| CVE-2022-26129 | 7.8 | Mar 3 | Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and… Affected: through 8.1 |
| CVE-2022-26128 | 7.8 | Mar 3 | A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c Affected: through 8.1 |
| CVE-2022-26127 | 7.8 | Mar 3 | A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c Affected: through 8.1 |
| CVE-2022-26126 | 7.8 | Mar 3 | Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c Affected: before 8.2 |
| CVE-2022-26125 | 7.8 | Mar 3 | Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c Affected: through 8.1 |
| CVE-2026-37457 | 7.5 | May 1 | An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a… Affected: 10.0 |
| CVE-2025-61104 | 7.5 | Oct 28 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c Affected: 4.0 through 10.4.1 |
| CVE-2025-61107 | 7.5 | Oct 28 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c Affected: 4.0 through 10.4.1 |
| CVE-2025-61106 | 7.5 | Oct 28 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c Affected: 4.0 through 10.4.1 |
| CVE-2025-61103 | 7.5 | Oct 28 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c Affected: 4.0 through 10.4.1 |
| CVE-2025-61105 | 7.5 | Oct 27 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c Affected: 4.0 through 10.4.1 |
| CVE-2025-61101 | 7.5 | Oct 27 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c Affected: 4.0 through 10.4.1 |
| CVE-2025-61100 | 7.5 | Oct 27 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c Affected: 2.0 through 10.4.1 |
| CVE-2025-61099 | 7.5 | Oct 27 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c Affected: 2.0 through 10.4.1 |
| CVE-2025-61102 | 7.5 | Oct 27 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c Affected: 4.0 through 10.4.1 |
| CVE-2024-44070 | 7.5 | Aug 19 | An issue was discovered in FRRouting (FRR) through 10.1 Affected: through 10.1 |
| CVE-2024-34088 | 7.5 | Apr 30 | In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer Affected: through 9.1 |
| CVE-2023-38407 | 7.5 | Nov 6 | bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing Affected: before 8.5 |
| CVE-2023-47235 | 7.5 | Nov 3 | An issue was discovered in FRRouting FRR through 9.0.1 Affected: through 9.0.1 |
| CVE-2023-47234 | 7.5 | Nov 3 | An issue was discovered in FRRouting FRR through 9.0.1 Affected: through 9.0.1 |
| CVE-2023-41909 | 7.5 | Sep 5 | An issue was discovered in FRRouting FRR through 9.0 Affected: through 9.0 |
| CVE-2023-38802 | 7.5 | Aug 29 | FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel… Affected: 7.5.1 through 9.0 |
| CVE-2023-41358 | 7.5 | Aug 29 | An issue was discovered in FRRouting FRR through 9.0 Affected: through 9.0 |
| CVE-2023-3748 | 7.5 | Jul 24 | A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored Affected: before 8.5 |
| CVE-2023-31490 | 7.5 | May 9 | An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function Affected: 8.4.2 |
| CVE-2022-36440 | 7.5 | Apr 3 | A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function Affected: 8.3 |
| CVE-2017-15865 | 7.5 | Nov 8 | bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a… Affected: before 2.0.2; 3.0; 3.0; 3.0; 3.0; 3.0; +1 more |
Showing 28