Red Hat Security AdvisoryRHSA-2026:24347
frr security update
Released 2026-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) frr-10.4.4-1.el10_2, frr-selinux-10.4.4-1.el10_2
Fixes 3 records
Priority LOW 39
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-06-03 · Fixed CWE-20
Priority LOW 39
An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2026-05-04 · Partial fix CWE-400
Priority LOW 39
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a craft…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00389 · Published 2026-05-01 · Fixed CWE-787
