Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:24370

Опубликовано: 11 июн. 2026
Источник: rocky
Оценка: Important

Описание

Important: frr10 security update

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga.

Security Fix(es):

  • frr: denial of service via crafted FlowSpec component (CVE-2026-37457)

  • frr: denial of service via crafted BGP UPDATE message (CVE-2026-37459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
frr10aarch643.el9_8frr10-10.4.3-3.el9_8.aarch64.rpm
frr10-selinuxnoarch3.el9_8frr10-selinux-10.4.3-3.el9_8.noarch.rpm
frr10x86_643.el9_8frr10-10.4.3-3.el9_8.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-37457
CVE-2026-37459

Ссылки на источники

Исправления

Связанные уязвимости

rocky логотип

RLSA-2026:24347

rocky
около 2 месяцев назад

Important: frr security update

oracle-oval логотип

ELSA-2026-24370

oracle-oval
около 1 месяца назад

ELSA-2026-24370: frr10 security update (IMPORTANT)

oracle-oval логотип

ELSA-2026-24347

oracle-oval
17 дней назад

ELSA-2026-24347: frr security update (IMPORTANT)

ubuntu логотип

CVE-2026-37459

CVSS3: 7.5
ubuntu
3 месяца назад

An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

redhat логотип

CVE-2026-37459

CVSS3: 7.5
redhat
3 месяца назад

An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.