> CVE-2026-37460

« BACK_TO_HOME
PUBLISHED
2026-06-03 14:16
MODIFIED
2026-06-03 14:16
EPSS (Prob. Exploit)
0.61%
Top 51.4%
DATA SOURCES:
NVD 🔗 2026-06-03 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-26 MSRC 🔗 2026-11-02

> DESCRIPTION

Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: frr security, bug fix, and enhancement update
An update for frr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS...
Red Hat Security Advisory: frr10 security, bug fix, and enhancement update
An update for frr10 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CV...
Red Hat Security Advisory: frr security update
An update for frr is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS...

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown

> HISTORIQUE DES MODIFICATIONS

Première apparition
03/06/2026 14:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://github.com/FRRouting/frr
https://github.com/FRRouting/frr/commit/7676cad65114aa23adde58
https://github.com/FRRouting/frr/pull/21098%2C
« BACK_TO_HOME