PT-2026-45939

CVE-2026-37460

·

Published

2026-04-15

·

Updated

2026-08-07

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions FRRouting versions stable/10.0 through stable/10.6
Description Missing input validation in the rfapiRibBi2Ri() function (rfapi rib.c) allows attackers to cause a Denial of Service (DoS) by supplying a crafted BGP UPDATE message.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2026-37460
ALSA-2026:24347
ALSA-2026:49511
ALSA-2026:49527
ALSA-2026:49607
CLSA-2026-1786035720
CLSA-2026-1786095204
RHSA-2026:24347
RHSA-2026:49511
RHSA-2026:49527
RHSA-2026:49607
USN-8175-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com