CVE-2026-37457
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via a crafted FlowSpec component.
Risk Assessment
The risk is a remote crash of the BGP process, potentially disrupting network routing and causing communication outages.
Recommendation
Immediately update FRRouting to a patched version or apply temporary access restrictions to the BGP service from trusted sources only.
Other vulnerabilities in FRRouting
See all- CVE-2020-12831Low
In FRRouting (FRR) up to version 7.3.1, when using the split-config feature, the init script creates an empty config file with world-readable default permissions, potentially leading to information leakage via frr.in and frrcommon.sh.in tools.
- CVE-2026-37460High
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) in FRRouting (FRR) from stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) by supplying a crafted BGP UPDATE message.
- CVE-2026-37459High
An integer underflow vulnerability exists in FRRouting (FRR) versions stable/10.0 through stable/10.6. Attackers can cause a Denial of Service (DoS) by sending a crafted BGP UPDATE message.
- CVE-2023-3748Low
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages, leading to an infinite loop and causing a denial of service.
Original NVD description (English source)
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.