Vulnerabilities > Frrouting
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-19 | CVE-2022-37032 | Out-of-bounds Read vulnerability in multiple products An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. | 9.1 |
| 2022-08-02 | CVE-2022-37035 | Race Condition vulnerability in Frrouting 8.3 An issue was discovered in bgpd in FRRouting (FRR) 8.3. | 8.1 |
| 2022-03-03 | CVE-2022-26125 | Improper Validation of Specified Quantity in Input vulnerability in Frrouting Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c. | 7.8 |
| 2022-03-03 | CVE-2022-26126 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c. | 7.8 |
| 2022-03-03 | CVE-2022-26127 | Improper Validation of Specified Quantity in Input vulnerability in Frrouting A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c. | 7.8 |
| 2022-03-03 | CVE-2022-26128 | Improper Validation of Specified Quantity in Input vulnerability in Frrouting A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c. | 7.8 |
| 2022-03-03 | CVE-2022-26129 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Frrouting Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and parse_update_subtlv in babeld/message.c. | 7.8 |
| 2019-01-10 | CVE-2019-5892 | Interpretation Conflict vulnerability in Frrouting bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affecting Cumulus Linux or VyOS), when ENABLE_BGP_VNC is used for Virtual Network Control, allows remote attackers to cause a denial of service (peering session flap) via attribute 255 in a BGP UPDATE packet. | 4.0 |
| 2017-11-08 | CVE-2017-15865 | Information Exposure vulnerability in Frrouting bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492). | 5.0 |