Skip to content
Noroxi

FRRouting records

48 published records for vendor frrouting.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
97.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

48 records
  • CVE-2023-38406
    39Monitor

    bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."

    CriticalCVSS 9.8No exploitEPSS 1%

    frrouting · frroutingNov 6, 2023

  • CVE-2023-41361
    39Monitor

    An issue was discovered in FRRouting FRR 9.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    frrouting · frroutingAug 29, 2023

  • CVE-2022-37032
    37Monitor

    An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service.

    CriticalCVSS 9.1Proof of conceptEPSS 2%

    frrouting · frroutingSep 19, 2022

  • CVE-2023-41359
    36Monitor

    An issue was discovered in FRRouting FRR through 9.0.

    CriticalCVSS 9.1No exploitEPSS 1%

    frrouting · frroutingAug 29, 2023

  • CVE-2023-41360
    36Monitor

    An issue was discovered in FRRouting FRR through 9.0.

    CriticalCVSS 9.1No exploitEPSS 1%

    frrouting · frroutingAug 29, 2023

  • CVE-2022-37035
    33Monitor

    An issue was discovered in bgpd in FRRouting (FRR) 8.3.

    HighCVSS 8.1No exploitEPSS 2%

    frrouting · frroutingAug 2, 2022

  • CVE-2017-15865
    31Monitor

    bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers

    HighCVSS 7.5No exploitEPSS 2%

    frrouting · frroutingNov 8, 2017

  • CVE-2023-31490
    31Monitor

    An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.

    HighCVSS 7.5No exploitEPSS 2%

    frrouting · frroutingMay 9, 2023

  • CVE-2023-38802
    31Monitor

    FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a

    HighCVSS 7.5No exploitEPSS 1%

    frrouting · frroutingAug 29, 2023

  • CVE-2022-26126
    31Monitor

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_n

    HighCVSS 7.8No exploitEPSS 1%

    frrouting · frroutingMar 3, 2022

  • CVE-2022-26129
    31Monitor

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subt

    HighCVSS 7.8No exploitEPSS 1%

    frrouting · frroutingMar 3, 2022

  • CVE-2022-26127
    31Monitor

    A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_exam

    HighCVSS 7.8No exploitEPSS 1%

    frrouting · frroutingMar 3, 2022

  • CVE-2022-26125
    31Monitor

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c.

    HighCVSS 7.8No exploitEPSS 1%

    frrouting · frroutingMar 3, 2022

  • CVE-2022-26128
    31Monitor

    A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin

    HighCVSS 7.8No exploitEPSS 0%

    frrouting · frroutingMar 3, 2022

  • CVE-2022-36440
    30Monitor

    A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function.

    HighCVSS 7.5No exploitEPSS 1%

    frrouting · frroutingApr 3, 2023

  • CVE-2023-41358
    30Monitor

    An issue was discovered in FRRouting FRR through 9.0.

    HighCVSS 7.5No exploitEPSS 1%

    frrouting · frroutingAug 29, 2023

  • CVE-2023-41909
    30Monitor

    An issue was discovered in FRRouting FRR through 9.0.

    HighCVSS 7.5No exploitEPSS 1%

    frrouting · frroutingSep 5, 2023

  • CVE-2023-38407
    30Monitor

    bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.

    HighCVSS 7.5No exploitEPSS 1%

    frrouting · frroutingNov 6, 2023

  • CVE-2023-47234
    30Monitor

    An issue was discovered in FRRouting FRR through 9.0.1.

    HighCVSS 7.5No exploitEPSS 1%

    frrouting · frroutingNov 3, 2023

  • CVE-2023-47235
    30Monitor

    An issue was discovered in FRRouting FRR through 9.0.1.

    HighCVSS 7.5No exploitEPSS 0%

    frrouting · frroutingNov 3, 2023

  • CVE-2023-3748
    30Monitor

    Inifinite loop in babld message parsing may cause dos

    HighCVSS 7.5No exploitEPSS 0%

    frrouting · frroutingJul 24, 2023

  • CVE-2024-34088
    30Monitor

    In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer.

    HighCVSS 7.5No exploitEPSS 0%

    frrouting · frroutingApr 30, 2024

  • CVE-2024-44070
    30Monitor

    An issue was discovered in FRRouting (FRR) through 10.1.

    HighCVSS 7.5No exploitEPSS 0%

    frrouting · frroutingAug 18, 2024

  • CVE-2025-61104
    30Monitor

    FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_e

    HighCVSS 7.5No exploitEPSS 0%

    frrouting · frroutingOct 28, 2025

  • CVE-2025-61106
    30Monitor

    FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at

    HighCVSS 7.5No exploitEPSS 0%

    frrouting · frroutingOct 28, 2025