Known Vulnerabilities for products from FRRouting
Listed below are 20 of the newest known vulnerabilities associated with the vendor "FRRouting".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-129456 json | Not Provided | 2026-11-14 | 2026-11-14 | |
| CVE-2026-129217 json | Not Provided | 2026-11-13 | 2026-11-13 | |
| CVE-2026-120221 json | Not Provided | 2026-11-13 | 2026-11-14 | |
| CVE-2026-120033 json | Not Provided | 2026-11-12 | 2026-11-14 | |
| CVE-2026-119776 json | Not Provided | 2026-11-04 | 2026-11-09 | |
| CVE-2026-37458 json | Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated at... | Not Provided | 2026-05-04 | 2026-11-11 |
| CVE-2026-37457 json | An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRout... | Not Provided | 2026-05-01 | 2026-11-11 |
| CVE-2026-28532 json | FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV ... | Not Provided | 2026-04-30 | 2026-06-17 |
| CVE-2026-5107 json | A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/... | Not Provided | 2026-03-30 | 2026-04-29 |
| CVE-2025-61105 json | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info funct... | Not Provided | 2025-10-27 | 2026-11-05 |
| CVE-2025-61102 json | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_si... | Not Provided | 2025-10-27 | 2026-11-05 |
| CVE-2025-61101 json | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_it... | Not Provided | 2025-10-27 | 2026-11-05 |
| CVE-2025-61100 json | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump fun... | Not Provided | 2025-10-27 | 2026-11-05 |
| CVE-2025-61099 json | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail funct... | Not Provided | 2025-10-27 | 2026-11-05 |
| CVE-2023-47235 json | An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is ... | 7.5 - HIGH | 2023-11-03 | 2023-11-14 |
| CVE-2023-47234 json | An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a... | 7.5 - HIGH | 2023-11-03 | 2023-11-14 |
| CVE-2023-46753 json | An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory ... | 5.9 - MEDIUM | 2023-10-26 | 2023-11-09 |
| CVE-2023-46752 json | An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash. | 5.9 - MEDIUM | 2023-10-26 | 2023-11-13 |
| CVE-2023-41909 json | An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requ... | 7.5 - HIGH | 2023-09-05 | 2023-11-15 |
| CVE-2023-41361 json | An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software v... | 9.8 - CRITICAL | 2023-08-29 | 2023-10-26 |
Known software with vulnerabilities from FRRouting
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Frrouting | Frrouting | 2.0 |