
CVE catalog
CVE-2026-28532
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t v
- Severity
- Medium · CVSS 6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.22% · Oct 25, 2026
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | frr | sid | 10.7.1-6 | fixed |
| Debian | frr | forky | 10.7.1-6 | fixed |
| Debian | frr | trixie | 10.3-3+deb13u1 | fixed |
| Debian | frr | trixie-security | 10.3-3+deb13u1 | fixed |
| Debian | frr | bookworm | 8.4.4-1.1~deb12u2 | fixed |
| Debian | frr | bookworm-security | 8.4.4-1.1~deb12u2 | fixed |
| Cpe | frr | Not reported | 8.4.4-1.1ubuntu6.7 | fixed |
| Cpe | frr-doc | Not reported | 8.4.4-1.1ubuntu6.7 | fixed |
| Cpe | frr-pythontools | Not reported | 8.4.4-1.1ubuntu6.7 | fixed |
| Cpe | frr-rpki-rtrlib | Not reported | 8.4.4-1.1ubuntu6.7 | fixed |
| Cpe | frr-snmp | Not reported | 8.4.4-1.1ubuntu6.7 | fixed |
| Cpe | frrouting | Not reported | 10.5.3 | fixed |
| Cpe | frr | Not reported | 8.4.4-1.1~deb12u2 | fixed |
| Ubuntu | frr | 22.04 | 7.5.1-1.1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.2 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.3 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.4 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.5 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.6 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.7 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.8 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.9 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.10 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.11 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.13 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.14 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.15 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.16 | fixed |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu1 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu3 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu4 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu5 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.1 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.2 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.3 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.4 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.5 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.6 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.7 | fixed |
| Ubuntu | frr | 25.10 | 10.2.1-1ubuntu3 | vulnerable |
| Ubuntu | frr | 25.10 | 10.3-3ubuntu2 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.1 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.2 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.3 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.4 | fixed |
| Ubuntu | frr | 26.04 | 10.4.1-3ubuntu1 | vulnerable |
| Ubuntu | frr | 26.04 | 10.4.1-3ubuntu2 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu1 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu2 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu3 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu4 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu4.1 | fixed |
| Suse | frr | linux enterprise high performance computing 15 sp4-espos | 7.4-150300.4.43.1 | fixed |
| Suse | frr | linux enterprise high performance computing 15 sp4-ltss | 7.4-150300.4.43.1 | fixed |
| Suse | frr | linux enterprise server 15 sp4-ltss | 7.4-150300.4.43.1 | fixed |
| Suse | frr | linux enterprise server for sap applications 15 sp4 | 7.4-150300.4.43.1 | fixed |
| Suse | frr | linux enterprise server 12 sp5-ltss | 8.5.7-8.16.1 | fixed |
| Suse | frr | linux enterprise server ltss extended security 12 sp5 | 8.5.7-8.16.1 | fixed |
| Suse | frr | linux enterprise module for server applications 15 sp7 | 10.2.6-150700.3.10.1 | fixed |
| Suse | frr | linux enterprise module for server applications 15 sp7 | 8.5.7-150500.4.43.1 | fixed |
| Suse | frr | linux enterprise high performance computing 15 sp5-espos | 8.5.7-150500.4.43.1 | fixed |
| Suse | frr | linux enterprise high performance computing 15 sp5-ltss | 8.5.7-150500.4.43.1 | fixed |
| Suse | frr | linux enterprise server 15 sp5-ltss | 8.5.7-150500.4.43.1 | fixed |
| Suse | frr | linux enterprise server 15 sp6-ltss | 8.5.7-150500.4.43.1 | fixed |
| Suse | frr | linux enterprise server for sap applications 15 sp5 | 8.5.7-150500.4.43.1 | fixed |
| Suse | frr | linux enterprise server for sap applications 15 sp6 | 8.5.7-150500.4.43.1 | fixed |
| Suse | frr | linux enterprise server 16.0 | 10.2.6-160000.1.1 | fixed |
| Suse | frr | linux enterprise server for sap applications 16.0 | 10.2.6-160000.1.1 | fixed |
| Ubuntu | quagga | pro | 1.1.1-3 | vulnerable |
| Ubuntu | quagga | pro | 1.1.1-3ubuntu1 | vulnerable |
| Ubuntu | quagga | pro | 1.2.2-1 | vulnerable |
| Ubuntu | quagga | pro | 1.2.2-1ubuntu1 | vulnerable |
| Ubuntu | quagga | pro | 1.2.4-1 | vulnerable |
| Ubuntu | quagga | pro | 1.2.4-1ubuntu0.1~esm1 | vulnerable |
| Ubuntu | quagga | pro | 1.2.4-1ubuntu0.1~esm2 | vulnerable |
| Ubuntu | quagga | 20.04 | 1.2.4-4build1 | vulnerable |
| Ubuntu | quagga | 20.04 | 1.2.4-4ubuntu0.1 | vulnerable |
| Ubuntu | quagga | 20.04 | 1.2.4-4ubuntu0.4 | vulnerable |
| Ubuntu | quagga | 20.04 | 1.2.4-4ubuntu0.5 | vulnerable |
| Ubuntu | frr | pro | 6.0.2-2build2 | vulnerable |
| Ubuntu | frr | pro | 7.2-1ubuntu1 | vulnerable |
| Ubuntu | frr | pro | 7.2-1ubuntu2 | vulnerable |
| Ubuntu | frr | pro | 7.2.1-1 | vulnerable |
| Ubuntu | frr | pro | 7.2.1-1ubuntu0.1 | vulnerable |
| Ubuntu | frr | pro | 7.2.1-1ubuntu0.2 | vulnerable |
| Ubuntu | frr | pro | 7.2.1-1ubuntu0.2+esm1 | vulnerable |
| Ubuntu | frr | pro | 7.2.1-1ubuntu0.2+esm2 | vulnerable |
| Ubuntu | frr | pro | 7.2.1-1ubuntu0.2+esm3 | vulnerable |
| Ubuntu | frr | pro | 7.2.1-1ubuntu0.2+esm4 | vulnerable |
| Ubuntu | frr | 22.04 | 7.5.1-1.1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.1 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.2 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.3 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.4 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.5 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.6 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.7 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.8 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.9 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.10 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.11 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.13 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.14 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.15 | vulnerable |
| Ubuntu | frr | 22.04 | 8.1-1ubuntu1.16 | fixed |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu1 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu3 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu4 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu5 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.1 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.2 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.3 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.4 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.5 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.6 | vulnerable |
| Ubuntu | frr | 24.04 | 8.4.4-1.1ubuntu6.7 | fixed |
| Ubuntu | frr | 25.10 | 10.2.1-1ubuntu3 | vulnerable |
| Ubuntu | frr | 25.10 | 10.3-3ubuntu2 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.1 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.2 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.3 | vulnerable |
| Ubuntu | frr | 25.10 | 10.4.1-3ubuntu1.4 | fixed |
| Ubuntu | frr | 26.04 | 10.4.1-3ubuntu1 | vulnerable |
| Ubuntu | frr | 26.04 | 10.4.1-3ubuntu2 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu1 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu2 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu3 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu4 | vulnerable |
| Ubuntu | frr | 26.04 | 10.5.1-1ubuntu4.1 | fixed |
| Opensuse | frr | tumbleweed | 10.6.1-1.1 | fixed |
| Cpe | frrouting | Not reported | 10.5.3 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | frr | source | sid | 10.5.3-1 | not yet assigned | Not reported | Not reported |
| Debian | frr | source | forky | 10.5.3-1 | not yet assigned | Not reported | Not reported |
| Debian | frr | source | trixie | 10.3-3+deb13u1 | not yet assigned | Not reported | Not reported |
| Debian | frr | source | bookworm | 8.4.4-1.1~deb12u2 | not yet assigned | Not reported | Not reported |
| Cpe | frr | cpe | Not reported | 8.4.4-1.1ubuntu6.7 | Not reported | Not reported | Not reported |
| Cpe | frr-doc | cpe | Not reported | 8.4.4-1.1ubuntu6.7 | Not reported | Not reported | Not reported |
| Cpe | frr-pythontools | cpe | Not reported | 8.4.4-1.1ubuntu6.7 | Not reported | Not reported | Not reported |
| Cpe | frr-rpki-rtrlib | cpe | Not reported | 8.4.4-1.1ubuntu6.7 | Not reported | Not reported | Not reported |
| Cpe | frr-snmp | cpe | Not reported | 8.4.4-1.1ubuntu6.7 | Not reported | Not reported | Not reported |
| Cpe | frrouting | cpe | Not reported | 10.5.3 | Not reported | Not reported | Not reported |
| Cpe | frr | cpe | Not reported | 8.4.4-1.1~deb12u2 | Not reported | Not reported | Not reported |
| Ubuntu | frr | deb | 22.04 | 8.1-1ubuntu1.16 | Not reported | USN-8376-1 | Not reported |
| Ubuntu | frr | deb | 24.04 | 8.4.4-1.1ubuntu6.7 | Not reported | USN-8376-1 | Not reported |
| Ubuntu | frr | deb | 25.10 | 10.4.1-3ubuntu1.4 | Not reported | USN-8376-1 | Not reported |
| Ubuntu | frr | deb | 26.04 | 10.5.1-1ubuntu4.1 | Not reported | USN-8376-1 | Not reported |
| Suse | frr | rpm | linux enterprise high performance computing 15 sp4-espos | 7.4-150300.4.43.1 | Not reported | SUSE-SU-2026:2644-1 | Not reported |
| Suse | frr | rpm | linux enterprise high performance computing 15 sp4-ltss | 7.4-150300.4.43.1 | Not reported | SUSE-SU-2026:2644-1 | Not reported |
| Suse | frr | rpm | linux enterprise server 15 sp4-ltss | 7.4-150300.4.43.1 | Not reported | SUSE-SU-2026:2644-1 | Not reported |
| Suse | frr | rpm | linux enterprise server for sap applications 15 sp4 | 7.4-150300.4.43.1 | Not reported | SUSE-SU-2026:2644-1 | Not reported |
| Suse | frr | rpm | linux enterprise server 12 sp5-ltss | 8.5.7-8.16.1 | Not reported | SUSE-SU-2026:2455-1 | Not reported |
| Suse | frr | rpm | linux enterprise server ltss extended security 12 sp5 | 8.5.7-8.16.1 | Not reported | SUSE-SU-2026:2455-1 | Not reported |
| Suse | frr | rpm | linux enterprise module for server applications 15 sp7 | 10.2.6-150700.3.10.1 | Not reported | SUSE-SU-2026:2457-1 | Not reported |
| Suse | frr | rpm | linux enterprise module for server applications 15 sp7 | 8.5.7-150500.4.43.1 | Not reported | SUSE-SU-2026:2454-1 | Not reported |
| Suse | frr | rpm | linux enterprise high performance computing 15 sp5-espos | 8.5.7-150500.4.43.1 | Not reported | SUSE-SU-2026:2454-1 | Not reported |
| Suse | frr | rpm | linux enterprise high performance computing 15 sp5-ltss | 8.5.7-150500.4.43.1 | Not reported | SUSE-SU-2026:2454-1 | Not reported |
| Suse | frr | rpm | linux enterprise server 15 sp5-ltss | 8.5.7-150500.4.43.1 | Not reported | SUSE-SU-2026:2454-1 | Not reported |
| Suse | frr | rpm | linux enterprise server 15 sp6-ltss | 8.5.7-150500.4.43.1 | Not reported | SUSE-SU-2026:2454-1 | Not reported |
| Suse | frr | rpm | linux enterprise server for sap applications 15 sp5 | 8.5.7-150500.4.43.1 | Not reported | SUSE-SU-2026:2454-1 | Not reported |
| Suse | frr | rpm | linux enterprise server for sap applications 15 sp6 | 8.5.7-150500.4.43.1 | Not reported | SUSE-SU-2026:2454-1 | Not reported |
| Suse | frr | rpm | linux enterprise server 16.0 | 10.2.6-160000.1.1 | Not reported | SUSE-SU-2026:22026-1 | Not reported |
| Suse | frr | rpm | linux enterprise server for sap applications 16.0 | 10.2.6-160000.1.1 | Not reported | SUSE-SU-2026:22026-1 | Not reported |
| Ubuntu | frr | deb | 22.04 | 8.1-1ubuntu1.16 | Not reported | UBUNTU-CVE-2026-28532 | Not reported |
| Ubuntu | frr | deb | 24.04 | 8.4.4-1.1ubuntu6.7 | Not reported | UBUNTU-CVE-2026-28532 | Not reported |
| Ubuntu | frr | deb | 25.10 | 10.4.1-3ubuntu1.4 | Not reported | UBUNTU-CVE-2026-28532 | Not reported |
| Ubuntu | frr | deb | 26.04 | 10.5.1-1ubuntu4.1 | Not reported | UBUNTU-CVE-2026-28532 | Not reported |
| Opensuse | frr | rpm | tumbleweed | 10.6.1-1.1 | Not reported | OPENSUSE-SU-2026:10721-1 | Not reported |
| Cpe | frrouting | cpe | Not reported | 10.5.3 | Not reported | NVD-CVE-2026-28532 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [frr-devel]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libfrr0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libfrrcares0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libfrrfpm_pb0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libfrrospfapiclient0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libfrr_pb0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libfrrsnmp0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libfrrzmq0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libmgmt_be_nb0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
- [libmlag_pb0]Unknown
Source package: [frr]
Details (1)
10.6.1-1.3· x86_64 · tumbleweedUnknown · Fixed:
10.6.1-1.1Version impact unknown
nvd · frr · opensuse · tumbleweed
[Debian 12 (Bookworm)]
- [frr]Fixed
Details (4)
8.4.4-1.1~deb12u2· amd64 · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· arm64 · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
- [frr-doc]Fixed
Source package: [frr]
Details (4)
8.4.4-1.1~deb12u2· all · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· all · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· all · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· all · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
- [frr-pythontools]Fixed
Source package: [frr]
Details (4)
8.4.4-1.1~deb12u2· all · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· all · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· all · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· all · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
- [frr-rpki-rtrlib]Fixed
Source package: [frr]
Details (4)
8.4.4-1.1~deb12u2· amd64 · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· arm64 · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
- [frr-snmp]Fixed
Source package: [frr]
Details (4)
8.4.4-1.1~deb12u2· amd64 · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· arm64 · bookwormFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
8.4.4-1.1~deb12u2nvd · frr · debian · bookworm; nvd · frr · debian · 12
[Debian 13 (Trixie)]
- [frr]Fixed
Details (4)
10.3-3+deb13u1· amd64 · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· arm64 · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· amd64 · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· arm64 · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
- [frr-doc]Fixed
Source package: [frr]
Details (4)
10.3-3+deb13u1· all · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· all · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· all · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· all · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
- [frr-pythontools]Fixed
Source package: [frr]
Details (4)
10.3-3+deb13u1· all · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· all · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· all · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· all · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
- [frr-rpki-rtrlib]Fixed
Source package: [frr]
Details (4)
10.3-3+deb13u1· amd64 · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· arm64 · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· amd64 · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· arm64 · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
- [frr-snmp]Fixed
Source package: [frr]
Details (4)
10.3-3+deb13u1· amd64 · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· arm64 · trixieFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· amd64 · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
10.3-3+deb13u1· arm64 · trixie-securityFixed · Fixed:
10.3-3+deb13u1nvd · frr · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10721-1.json]
- [https://github.com/FRRouting/frr/commit/f098decf02987fbf1c891766c1516ac832adadfd]
- [https://github.com/FRRouting/frr/pull/21002]
- [https://github.com/FRRouting/frr/releases/tag/frr-10.5.3]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-28532]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-28532]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22026-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2454-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2455-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2457-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2644-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-28532]
- [https://osv.dev/vulnerability/USN-8376-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10721-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-28532]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28532.json]
- [https://ubuntu.com/security/notices/USN-8376-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1333.json]
- [https://www.vulncheck.com/advisories/frrouting-integer-overflow-in-ospf-tlv-parser-functions]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]