https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T11:36:03.097289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6434 ALSA-2023:6434 — Moderate: frr security and bug fix update 2026-10-15T11:36:03.103798+00:00

Affected: AlmaLinux:9: frr, AlmaLinux:9: frr-selinux

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

* frr: Reachable assertion in peek_for_as4_capability function (CVE-2022-36440) * frr: denial of service by crafting a BGP OPEN message with an option of type 0xff (CVE-2022-40302) * frr: denial of service by crafting a BGP OPEN message with an option of type in bgp_open_option_parse in the bgp_open.c 0xff (CVE-2022-40318) * frr: out-of-bounds read exists in the BGP daemon of FRRouting (CVE-2022-43681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-02672 bdu:2023-02672 2026-10-15T11:36:03.103884+00:00 bdu:2023-02672 https://cve.radiocsirt.org/vuln/euvd-2026-19336 EUVD-2026-19336 2026-10-15T11:36:03.103908+00:00 EUVD-2026-19336 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40318 fkie_cve-2022-40318 2026-10-15T11:36:03.103928+00:00

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case. NOTE: this behavior occurs in bgp_open_option_parse in the bgp_open.c file, a different location (with a different attack vector) relative to CVE-2022-40302.

 https://cve.radiocsirt.org/vuln/ghsa-9rqq-99cf-35g5 GHSA-9rqq-99cf-35g5 2026-10-15T11:36:03.103989+00:00

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case. NOTE: this behavior occurs in bgp_open_option_parse in the bgp_open.c file, a different location (with a different attack vector) relative to CVE-2022-40302.

 https://cve.radiocsirt.org/vuln/gsd-2022-40318 gsd-2022-40318 2026-10-15T11:36:03.104010+00:00 gsd-2022-40318 https://cve.radiocsirt.org/vuln/rhsa-2023:6434 RHSA-2023:6434 — security update for frr 2026-10-15T11:36:03.104050+00:00

security update for frr

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40318 Withdrawn: UBUNTU-CVE-2022-40318 2026-10-15T11:36:03.104078+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: frr, Ubuntu:22.04:LTS: frr

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case. NOTE: this behavior occurs in bgp_open_option_parse in the bgp_open.c file, a different location (with a different attack vector) relative to CVE-2022-40302.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1146 WID-SEC-W-2023-1146 — FRRouting: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-15T11:36:03.104117+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in FRRouting ausnutzen, um einen Denial of Service Angriff durchzuführen.