https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:42:17.678688+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6434 ALSA-2023:6434 — Moderate: frr security and bug fix update 2026-10-15T03:42:17.684176+00:00

Affected: AlmaLinux:9: frr, AlmaLinux:9: frr-selinux

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

* frr: Reachable assertion in peek_for_as4_capability function (CVE-2022-36440) * frr: denial of service by crafting a BGP OPEN message with an option of type 0xff (CVE-2022-40302) * frr: denial of service by crafting a BGP OPEN message with an option of type in bgp_open_option_parse in the bgp_open.c 0xff (CVE-2022-40318) * frr: out-of-bounds read exists in the BGP daemon of FRRouting (CVE-2022-43681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-02322 bdu:2023-02322 2026-10-15T03:42:17.684232+00:00 bdu:2023-02322 https://cve.radiocsirt.org/vuln/euvd-2026-212765 EUVD-2026-212765 2026-10-15T03:42:17.684249+00:00 EUVD-2026-212765 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40302 fkie_cve-2022-40302 2026-10-15T03:42:17.684262+00:00

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

 https://cve.radiocsirt.org/vuln/ghsa-j7hm-p94x-q9pw GHSA-j7hm-p94x-q9pw 2026-10-15T03:42:17.684284+00:00

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

 https://cve.radiocsirt.org/vuln/gsd-2022-40302 gsd-2022-40302 2026-10-15T03:42:17.684300+00:00 gsd-2022-40302 https://cve.radiocsirt.org/vuln/rhsa-2023:6434 RHSA-2023:6434 — security update for frr 2026-10-15T03:42:17.684310+00:00

security update for frr

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40302 Withdrawn: UBUNTU-CVE-2022-40302 2026-10-15T03:42:17.684326+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: frr, Ubuntu:22.04:LTS: frr

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1146 WID-SEC-W-2023-1146 — FRRouting: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-15T03:42:17.684347+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in FRRouting ausnutzen, um einen Denial of Service Angriff durchzuführen.