Approved changes feed: RSS · Atom
cpe:2.3:a:frrouting:frr:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Frrouting (e294935e-b43b-5a5a-9647-a9586c51d310) |
|---|---|
| Product | Frr (eb70250b-3dfe-5479-98b2-02fc5f68a0b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5107 |
vulnerable | 2026-06-08 08:07:03.008728 |
FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control
MEDIUM (4.2)
A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.
Published: 2026-03-30T05:00:19.025Z
Updated: 2026-03-30T16:02:10.336Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28532 |
vulnerable | 2026-06-08 07:55:15.422325 |
FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions
MEDIUM (6.5)
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.
Published: 2026-04-30T20:17:51.060Z
Updated: 2026-05-25T23:41:54.464Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.