Login Request a demo
FR
Vendor
FRRouting
2 products with CVEs on record
51
CVEs
0
On KEV
0
New 30D
Products
FR
FRRouting
FRRouting
9.8
49 CVEs0 on KEV0 new
FR
frr
FRRouting
6.5
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-42917
FR
FRRouting
FRRouting
6.7
0%
Sep 13In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files…
CVE-2026-37458
FR
Frrouting
Frrouting
6.5
0%
May 4Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via…
CVE-2026-37457
FR
Frrouting
Frrouting
7.5
0%
May 1An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a…
CVE-2026-28532
FR
frr
FRRouting
6.5
0%
Apr 30FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions
CVE-2026-5107
FR
FRR
FRRouting
4.2
0%
Mar 30FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control
CVE-2025-61107
FR
Frrouting
Frrouting
7.5
1%
Oct 28FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c
CVE-2025-61106
FR
Frrouting
Frrouting
7.5
1%
Oct 28FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c
CVE-2025-61104
FR
Frrouting
Frrouting
7.5
1%
Oct 28FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c
CVE-2025-61103
FR
Frrouting
Frrouting
7.5
1%
Oct 28FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c
CVE-2025-61100
FR
Frrouting
Frrouting
7.5
1%
Oct 27FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c
CVE-2025-61105
FR
Frrouting
Frrouting
7.5
1%
Oct 27FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c
CVE-2025-61102
FR
Frrouting
Frrouting
7.5
1%
Oct 27FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c
CVE-2025-61101
FR
Frrouting
Frrouting
7.5
1%
Oct 27FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c
CVE-2025-61099
FR
Frrouting
Frrouting
7.5
1%
Oct 27FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c
CVE-2024-44070
FR
Frrouting
Frrouting
7.5
1%
Aug 19An issue was discovered in FRRouting (FRR) through 10.1
CVE-2024-34088
FR
Frrouting
Frrouting
7.5
1%
Apr 30In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer
CVE-2024-31951
FR
Frrouting
Frrouting
6.5
1%
Apr 7In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an…
CVE-2024-31950
FR
Frrouting
Frrouting
6.5
1%
Apr 7In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their…
CVE-2024-31949
FR
Frrouting
Frrouting
6.5
1%
Apr 7In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing
CVE-2024-31948
FR
Frrouting
Frrouting
6.5
1%
Apr 7In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash
CVE-2024-27913
FR
Frrouting
Frrouting
6.5
0%
Feb 28ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet,…
CVE-2023-38407
FR
Frrouting
Frrouting
7.5
1%
Nov 6bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing
CVE-2023-38406
FR
Frrouting
Frrouting
9.8
1%
Nov 6bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
CVE-2023-47235
FR
Frrouting
Frrouting
7.5
1%
Nov 3An issue was discovered in FRRouting FRR through 9.0.1
CVE-2023-47234
FR
Frrouting
Frrouting
7.5
1%
Nov 3An issue was discovered in FRRouting FRR through 9.0.1
CVE-2023-46753
FR
Frrouting
Frrouting
5.9
1%
Oct 26An issue was discovered in FRRouting FRR through 9.0.1
CVE-2023-46752
FR
Frrouting
Frrouting
5.9
1%
Oct 26An issue was discovered in FRRouting FRR through 9.0.1
CVE-2023-41909
FR
Frrouting
Frrouting
7.5
1%
Sep 5An issue was discovered in FRRouting FRR through 9.0
CVE-2023-38802
FR
Frrouting
Frrouting
7.5
2%
Aug 29FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel…
CVE-2023-41361
FR
Frrouting
Frrouting
9.8
1%
Aug 29An issue was discovered in FRRouting FRR 9.0
CVE-2023-41360
FR
Frrouting
Frrouting
9.1
1%
Aug 29An issue was discovered in FRRouting FRR through 9.0
CVE-2023-41359
FR
Frrouting
Frrouting
9.1
1%
Aug 29An issue was discovered in FRRouting FRR through 9.0
CVE-2023-41358
FR
Frrouting
Frrouting
7.5
1%
Aug 29An issue was discovered in FRRouting FRR through 9.0
CVE-2023-3748
FR
Frrouting
Frrouting
7.5
1%
Jul 24A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored
CVE-2023-31490
FR
Frrouting
Frrouting
7.5
2%
May 9An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function
CVE-2023-31489
FR
Frrouting
Frrouting
5.5
1%
May 9An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function
CVE-2022-43681
FR
Frrouting
Frrouting
6.5
2%
May 3An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4
CVE-2022-40318
FR
Frrouting
Frrouting
6.5
2%
May 3An issue was discovered in bgpd in FRRouting (FRR) through 8.4
CVE-2022-40302
FR
Frrouting
Frrouting
6.5
2%
May 3An issue was discovered in bgpd in FRRouting (FRR) through 8.4
CVE-2022-36440
FR
Frrouting
Frrouting
7.5
2%
Apr 3A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function
CVE-2022-37032
FR
Frrouting
Frrouting
9.1
2%
Sep 19An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service
CVE-2022-37035
FR
Frrouting
Frrouting
8.1
3%
Aug 2An issue was discovered in bgpd in FRRouting (FRR) 8.3
CVE-2022-26129
FR
Frrouting
Frrouting
7.8
1%
Mar 3Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and…
CVE-2022-26128
FR
Frrouting
Frrouting
7.8
1%
Mar 3A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c
CVE-2022-26127
FR
Frrouting
Frrouting
7.8
1%
Mar 3A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c
CVE-2022-26126
FR
Frrouting
Frrouting
7.8
1%
Mar 3Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c
CVE-2022-26125
FR
Frrouting
Frrouting
7.8
1%
Mar 3Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c
CVE-2019-5892
FR
Frrouting
Frrouting
6.5
3%
Jan 10bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affecting Cumulus Linux or VyOS), when…
CVE-2017-15865
FR
Frrouting
Frrouting
7.5
2%
Nov 8bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a…