Log in Start free

Vulnerability · Published May 1, 2026 · Assigned by mitre

CVE-2026-37457

High 7.5

In plain English

A high-severity out-of-bounds write in the frr package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 66.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10frr10.4.4-1.el10_2ALSA-2026:24347
AlmaLinux:8frr7.5.1-24.el8_10ALSA-2026:24340
AlmaLinux:9frr8.5.3-13.el9_8ALSA-2026:24371
AlmaLinux:10frr-selinux10.4.4-1.el10_2ALSA-2026:24347
AlmaLinux:8frr-selinux7.5.1-24.el8_10ALSA-2026:24340
AlmaLinux:9frr-selinux8.5.3-13.el9_8ALSA-2026:24371
AlmaLinux:9frr1010.4.3-3.el9_8ALSA-2026:24370
AlmaLinux:9frr10-selinux10.4.3-3.el9_8ALSA-2026:24370
Debian:12frr8.4.4-1.1~deb12u2DEBIAN-CVE-2026-37457
Debian:13frr10.3-3+deb13u1DEBIAN-CVE-2026-37457
Debian:14frr10.6.0-2DEBIAN-CVE-2026-37457
Rocky Linux:10frr0:10.4.4-1.el10_2RLSA-2026:24347
Rocky Linux:8frr0:7.5.1-24.el8_10RLSA-2026:24340
Rocky Linux:9frr0:8.5.3-13.el9_8RLSA-2026:24371
Rocky Linux:9frr100:10.4.3-3.el9_8RLSA-2026:24370
Ubuntu:22.04:LTSfrr8.1-1ubuntu1.16UBUNTU-CVE-2026-37457
Ubuntu:24.04:LTSfrr8.4.4-1.1ubuntu6.7UBUNTU-CVE-2026-37457
Ubuntu:25.10frr10.4.1-3ubuntu1.4UBUNTU-CVE-2026-37457
Ubuntu:26.04:LTSfrr10.5.1-1ubuntu4.1UBUNTU-CVE-2026-37457

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References