CVE catalog

CVE-2026-5107

A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation lea

[CVE catalog]

Severity
Medium · CVSS 4.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.28% · Oct 25, 2026

A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfrrsid10.7.1-6fixed
Debianfrrforky10.7.1-6fixed
Debianfrrtrixie10.3-3+deb13u1fixed
Debianfrrtrixie-security10.3-3+deb13u1fixed
Debianfrrbookworm8.4.4-1.1~deb12u2fixed
Debianfrrbookworm-security8.4.4-1.1~deb12u2fixed
CpefrrNot reported8.4.4-1.1ubuntu6.6fixed
Cpefrr-docNot reported8.4.4-1.1ubuntu6.6fixed
Cpefrr-pythontoolsNot reported8.4.4-1.1ubuntu6.6fixed
Cpefrr-rpki-rtrlibNot reported8.4.4-1.1ubuntu6.6fixed
Cpefrr-snmpNot reported8.4.4-1.1ubuntu6.6fixed
CpefrroutingNot reportedNot reportedunknown
CpefrrNot reported8.4.4-1.1~deb12u2fixed
Ubuntufrrpro6.0.2-2build2vulnerable
Ubuntufrrpro7.2-1ubuntu1vulnerable
Ubuntufrrpro7.2-1ubuntu2vulnerable
Ubuntufrrpro7.2.1-1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm2vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm3vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm4fixed
Ubuntufrr22.047.5.1-1.1vulnerable
Ubuntufrr22.048.1-1vulnerable
Ubuntufrr22.048.1-1ubuntu1vulnerable
Ubuntufrr22.048.1-1ubuntu1.1vulnerable
Ubuntufrr22.048.1-1ubuntu1.2vulnerable
Ubuntufrr22.048.1-1ubuntu1.3vulnerable
Ubuntufrr22.048.1-1ubuntu1.4vulnerable
Ubuntufrr22.048.1-1ubuntu1.5vulnerable
Ubuntufrr22.048.1-1ubuntu1.6vulnerable
Ubuntufrr22.048.1-1ubuntu1.7vulnerable
Ubuntufrr22.048.1-1ubuntu1.8vulnerable
Ubuntufrr22.048.1-1ubuntu1.9vulnerable
Ubuntufrr22.048.1-1ubuntu1.10vulnerable
Ubuntufrr22.048.1-1ubuntu1.11vulnerable
Ubuntufrr22.048.1-1ubuntu1.13vulnerable
Ubuntufrr22.048.1-1ubuntu1.14vulnerable
Ubuntufrr22.048.1-1ubuntu1.15fixed
Ubuntufrr24.048.4.4-1.1ubuntu1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu5vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.2vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.5vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.6fixed
Ubuntufrr25.1010.2.1-1ubuntu3vulnerable
Ubuntufrr25.1010.3-3ubuntu2vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1.1vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1.2fixed
Ubuntuquaggapro1.1.1-3vulnerable
Ubuntuquaggapro1.1.1-3ubuntu1vulnerable
Ubuntuquaggapro1.2.2-1vulnerable
Ubuntuquaggapro1.2.2-1ubuntu1vulnerable
Ubuntuquaggapro1.2.4-1vulnerable
Ubuntuquaggapro1.2.4-1ubuntu0.1~esm1vulnerable
Ubuntuquaggapro1.2.4-1ubuntu0.1~esm2vulnerable
Ubuntuquagga20.041.2.4-4build1vulnerable
Ubuntuquagga20.041.2.4-4ubuntu0.1vulnerable
Ubuntuquagga20.041.2.4-4ubuntu0.4vulnerable
Ubuntuquagga20.041.2.4-4ubuntu0.5vulnerable
Ubuntufrrpro6.0.2-2build2vulnerable
Ubuntufrrpro7.2-1ubuntu1vulnerable
Ubuntufrrpro7.2-1ubuntu2vulnerable
Ubuntufrrpro7.2.1-1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm2vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm3vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm4fixed
Ubuntufrr22.047.5.1-1.1vulnerable
Ubuntufrr22.048.1-1vulnerable
Ubuntufrr22.048.1-1ubuntu1vulnerable
Ubuntufrr22.048.1-1ubuntu1.1vulnerable
Ubuntufrr22.048.1-1ubuntu1.2vulnerable
Ubuntufrr22.048.1-1ubuntu1.3vulnerable
Ubuntufrr22.048.1-1ubuntu1.4vulnerable
Ubuntufrr22.048.1-1ubuntu1.5vulnerable
Ubuntufrr22.048.1-1ubuntu1.6vulnerable
Ubuntufrr22.048.1-1ubuntu1.7vulnerable
Ubuntufrr22.048.1-1ubuntu1.8vulnerable
Ubuntufrr22.048.1-1ubuntu1.9vulnerable
Ubuntufrr22.048.1-1ubuntu1.10vulnerable
Ubuntufrr22.048.1-1ubuntu1.11vulnerable
Ubuntufrr22.048.1-1ubuntu1.13vulnerable
Ubuntufrr22.048.1-1ubuntu1.14vulnerable
Ubuntufrr22.048.1-1ubuntu1.15fixed
Ubuntufrr24.048.4.4-1.1ubuntu1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu5vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.2vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.5vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.6fixed
Ubuntufrr25.1010.2.1-1ubuntu3vulnerable
Ubuntufrr25.1010.3-3ubuntu2vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1.1vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1.2fixed
Opensusefrrtumbleweed10.5.1-3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfrrsourcesid10.6.0-2not yet assignedNot reported[1132329]
Debianfrrsourceforky10.6.0-2not yet assignedNot reported[1132329]
Debianfrrsourcetrixie10.3-3+deb13u1not yet assignedNot reported[1132329]
Debianfrrsourcebookworm8.4.4-1.1~deb12u2not yet assignedNot reported[1132329]
CpefrrcpeNot reported8.4.4-1.1ubuntu6.6Not reportedNot reportedNot reported
Cpefrr-doccpeNot reported8.4.4-1.1ubuntu6.6Not reportedNot reportedNot reported
Cpefrr-pythontoolscpeNot reported8.4.4-1.1ubuntu6.6Not reportedNot reportedNot reported
Cpefrr-rpki-rtrlibcpeNot reported8.4.4-1.1ubuntu6.6Not reportedNot reportedNot reported
Cpefrr-snmpcpeNot reported8.4.4-1.1ubuntu6.6Not reportedNot reportedNot reported
CpefrrcpeNot reported8.4.4-1.1~deb12u2Not reportedNot reportedNot reported
Ubuntufrrdebpro7.2.1-1ubuntu0.2+esm4Not reportedUSN-8175-1Not reported
Ubuntufrrdeb22.048.1-1ubuntu1.15Not reportedUSN-8175-1Not reported
Ubuntufrrdeb24.048.4.4-1.1ubuntu6.6Not reportedUSN-8175-1Not reported
Ubuntufrrdeb25.1010.4.1-3ubuntu1.2Not reportedUSN-8175-1Not reported
Ubuntufrrdebpro7.2.1-1ubuntu0.2+esm4Not reportedUBUNTU-CVE-2026-5107Not reported
Ubuntufrrdeb22.048.1-1ubuntu1.15Not reportedUBUNTU-CVE-2026-5107Not reported
Ubuntufrrdeb24.048.4.4-1.1ubuntu6.6Not reportedUBUNTU-CVE-2026-5107Not reported
Ubuntufrrdeb25.1010.4.1-3ubuntu1.2Not reportedUBUNTU-CVE-2026-5107Not reported
Opensusefrrrpmtumbleweed10.5.1-3.1Not reportedOPENSUSE-SU-2026:10606-1Not reported

[Debian bug #1132329]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [frr-devel]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libfrr0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libfrrcares0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libfrrfpm_pb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libfrrospfapiclient0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libfrr_pb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libfrrsnmp0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libfrrzmq0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libmgmt_be_nb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

  • [libmlag_pb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.5.1-3.1

      Version impact unknown

      nvd · frr · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [frr]Fixed
    Details (4)

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

  • [frr-doc]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

  • [frr-pythontools]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

  • [frr-rpki-rtrlib]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

  • [frr-snmp]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      nvd · frr · debian · bookworm; nvd · frr · debian · 12

[Debian 13 (Trixie)]

  • [frr]Fixed
    Details (4)

    • 10.3-3+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

  • [frr-doc]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

  • [frr-pythontools]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

  • [frr-rpki-rtrlib]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

  • [frr-snmp]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      nvd · frr · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]