CVE-2026-37460
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
- Score
- CVSS 3.1 7.5 High
- Status
- Awaiting Analysis - cve@mitre.org
- Published
- 2026-06-03
- Last modified
- 2026-06-05
- Weaknesses
- CWE-20
References
- https://github.com/FRRouting/frr
- https://github.com/FRRouting/frr/commit/7676cad65114aa23adde58
- https://github.com/FRRouting/frr/pull/21098%2C
