Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-37457

Опубликовано: 01 мая 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:frrouting:frrouting:10.0:-:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00389
Низкий

7.5 High

CVSS3

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 месяца назад

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

CVSS3: 7.5
redhat
3 месяца назад

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

CVSS3: 7.5
msrc
3 месяца назад

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

CVSS3: 7.5
debian
3 месяца назад

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op ...

rocky
около 2 месяцев назад

Important: frr security update

EPSS

Процентиль: 32%
0.00389
Низкий

7.5 High

CVSS3

Дефекты

CWE-787
CWE-787