https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:01:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09512 bdu:2026-09512 https://cve.radiocsirt.org/vuln/bdu:2026-09512 https://cve.radiocsirt.org/vuln/euvd-2026-380338 EUVD-2026-380338 https://cve.radiocsirt.org/vuln/euvd-2026-380338 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28532 <p>FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.</p> <p>FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28532 https://cve.radiocsirt.org/vuln/ghsa-wjc3-2qjv-c8fp <p>FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.</p> <p>FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.</p> https://cve.radiocsirt.org/vuln/ghsa-wjc3-2qjv-c8fp https://cve.radiocsirt.org/vuln/msrc_cve-2026-28532 msrc_CVE-2026-28532 https://cve.radiocsirt.org/vuln/msrc_cve-2026-28532 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10721-1 <p>frr-10.6.1-1.1 on GA media</p> <p>frr-10.6.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10721-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22026-1 <p>Security update for frr</p> <p>Security update for frr</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22026-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28532 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: quagga, Ubuntu:Pro:18.04:LTS: quagga, Ubuntu:20.04:LTS: quagga, Ubuntu:Pro:20.04:LTS: frr, Ubuntu:22.04:LTS: frr, Ubuntu:24.04:LTS: frr, Ubuntu:25.10: frr, Ubuntu:26.04:LTS: frr</p> <p>FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: quagga, Ubuntu:Pro:18.04:LTS: quagga, Ubuntu:20.04:LTS: quagga, Ubuntu:Pro:20.04:LTS: frr, Ubuntu:22.04:LTS: frr, Ubuntu:24.04:LTS: frr, Ubuntu:25.10: frr, Ubuntu:26.04:LTS: frr</p> <p>FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28532 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1333 <p>Ein Angreifer kann mehrere Schwachstellen in FRRouting Project FRRouting ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in FRRouting Project FRRouting ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1333