[CVE-2026-37460 ] Published: Jun 3, 2026, 12:00:00 AM UTC
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPD
High(7.5) Affected Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Affected
nvd · frr · debian · bookworm; nvd · frr · debian · 12
8.4.4-1.1~deb12u2 · arm64 · bookworm
Affected
nvd · frr · debian · bookworm; nvd · frr · debian · 12
[CVE-2024-55553 ] Published: Jan 5, 2025, 11:00:00 PM UTC
FRR vulnerabilities
Medium(5.3) Affected Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Affected
usn · frr · debian · bookworm; usn · frr · debian · 12
8.4.4-1.1~deb12u2 · arm64 · bookworm
Affected
usn · frr · debian · bookworm; usn · frr · debian · 12
[CVE-2024-44070 ] Published: Aug 19, 2024, 2:15:00 AM UTC
FRR vulnerabilities
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 27, 2026, 2:23:18 AM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Affected
usn · frr · debian · bookworm; usn · frr · debian · 12
8.4.4-1.1~deb12u2 · arm64 · bookworm
Affected
usn · frr · debian · bookworm; usn · frr · debian · 12
[CVE-2022-40302 ] Published: May 3, 2023, 12:16:00 PM UTC
frr: CVE-2022-40302
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:29:41 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-40318 ] Published: May 3, 2023, 12:16:00 PM UTC
frr: CVE-2022-40318
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:29:41 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-43681 ] Published: May 3, 2023, 12:16:00 PM UTC
frr: CVE-2022-43681
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:30:19 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-36440 ] Published: Apr 3, 2023, 4:15:00 PM UTC
frr: CVE-2022-36440
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:28:48 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-37032 ] Published: Sep 12, 2022, 7:02:12 AM UTC
frr: CVE-2022-37032
High(7.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:28:59 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-37035 ] Published: Aug 2, 2022, 11:15:00 PM UTC
frr: CVE-2022-37035
High(8.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:28:59 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-26125 ] Published: Mar 3, 2022, 6:15:00 PM UTC
frr: CVE-2022-26125
High(7.8) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:25:07 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-26126 ] Published: Mar 3, 2022, 6:15:00 PM UTC
frr: CVE-2022-26126
High(8.2) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:25:06 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-26127 ] Published: Mar 3, 2022, 6:15:00 PM UTC
frr: CVE-2022-26127
High(8.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:25:06 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-26128 ] Published: Feb 4, 2022, 12:00:00 AM UTC
frr: CVE-2022-26128
High(8.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:25:07 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-26129 ] Published: Feb 4, 2022, 12:00:00 AM UTC
frr: CVE-2022-26129
High(8.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:25:07 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
dsa · frr · debian · bookworm
[CVE-2022-42917 ] Published: Jan 1, 2022, 12:00:00 AM UTC
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for
High(8.4) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:30:15 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Fixed · Fixed: 8.4.1-1
nvd · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Fixed · Fixed: 8.4.1-1
nvd · frr · debian · bookworm
[CVE-2020-12831 ] Published: May 3, 2020, 12:00:00 AM UTC
frr: CVE-2020-12831
Medium(5.3) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:47:35 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Affected
dsa · frr · debian · bookworm; dsa · frr · debian · 12
8.4.4-1.1~deb12u2 · arm64 · bookworm
Affected
dsa · frr · debian · bookworm; dsa · frr · debian · 12
[CVE-2017-3224 ] Published: Jul 24, 2018, 3:29:00 PM UTC
frr: CVE-2017-3224
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:29:11 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Not affected
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Not affected
dsa · frr · debian · bookworm
[CVE-2019-5892 ] Published: Not reported
frr: CVE-2019-5892
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:44:48 PM UTC
Details (2) 8.4.4-1.1~deb12u2 · amd64 · bookworm
Not affected
dsa · frr · debian · bookworm
8.4.4-1.1~deb12u2 · arm64 · bookworm
Not affected
dsa · frr · debian · bookworm