Approved changes feed: RSS · Atom

cpe:2.3:a:frrouting:frrouting:8.3:-:*:*:*:*:*:*

part: a version: 8.3 update: -

VendorFrrouting (e294935e-b43b-5a5a-9647-a9586c51d310)
ProductFrrouting (6fc7156a-ba42-560e-a551-8a0d86d6a1dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/frrouting/frr purl2cpe 2026-06-01 10:16:02.342208
pkg:github/frrouting/frr purl2cpe 2026-06-01 10:16:02.342209

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-37035 vulnerable 2026-06-08 05:46:08.537585 Details available
An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.
Published: 2022-08-02T00:00:00.000Z
Updated: 2025-11-04T16:09:47.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36440 vulnerable 2026-06-08 05:46:07.423871 Details available
A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS.
Published: 2023-04-03T00:00:00.000Z
Updated: 2024-08-03T10:07:33.895Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.