Vulnerabilities > Frrouting > Frrouting > 4.0

DATE CVE VULNERABILITY TITLE RISK
2022-03-03 CVE-2022-26129 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Frrouting
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and parse_update_subtlv in babeld/message.c.
local
low complexity
frrouting CWE-119
7.8
2019-01-10 CVE-2019-5892 Interpretation Conflict vulnerability in Frrouting
bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affecting Cumulus Linux or VyOS), when ENABLE_BGP_VNC is used for Virtual Network Control, allows remote attackers to cause a denial of service (peering session flap) via attribute 255 in a BGP UPDATE packet.
network
low complexity
frrouting CWE-436
4.0