Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2644-1

Опубликовано: 26 июн. 2026
Источник: suse-cvrf

Описание

Security update for frr

This update for frr fixes the following issues

  • CVE-2026-28532: Denial of Service due to integer overflow in OSPF TLV parser functions (bsc#1263859).
  • CVE-2026-37457: An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (bsc#1263863).
  • CVE-2026-37458: missing input validation in the MP_REACH_NLRI component allows authenticated attackers to cause a DoS via a crafted UPDATE message (bsc#1263974).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
frr-7.4-150300.4.43.1
frr-devel-7.4-150300.4.43.1
libfrr0-7.4-150300.4.43.1
libfrr_pb0-7.4-150300.4.43.1
libfrrcares0-7.4-150300.4.43.1
libfrrfpm_pb0-7.4-150300.4.43.1
libfrrgrpc_pb0-7.4-150300.4.43.1
libfrrospfapiclient0-7.4-150300.4.43.1
libfrrsnmp0-7.4-150300.4.43.1
libfrrzmq0-7.4-150300.4.43.1
libmlag_pb0-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
frr-7.4-150300.4.43.1
frr-devel-7.4-150300.4.43.1
libfrr0-7.4-150300.4.43.1
libfrr_pb0-7.4-150300.4.43.1
libfrrcares0-7.4-150300.4.43.1
libfrrfpm_pb0-7.4-150300.4.43.1
libfrrgrpc_pb0-7.4-150300.4.43.1
libfrrospfapiclient0-7.4-150300.4.43.1
libfrrsnmp0-7.4-150300.4.43.1
libfrrzmq0-7.4-150300.4.43.1
libmlag_pb0-7.4-150300.4.43.1
SUSE Linux Enterprise Server 15 SP4-LTSS
frr-7.4-150300.4.43.1
frr-devel-7.4-150300.4.43.1
libfrr0-7.4-150300.4.43.1
libfrr_pb0-7.4-150300.4.43.1
libfrrcares0-7.4-150300.4.43.1
libfrrfpm_pb0-7.4-150300.4.43.1
libfrrgrpc_pb0-7.4-150300.4.43.1
libfrrospfapiclient0-7.4-150300.4.43.1
libfrrsnmp0-7.4-150300.4.43.1
libfrrzmq0-7.4-150300.4.43.1
libmlag_pb0-7.4-150300.4.43.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
frr-7.4-150300.4.43.1
frr-devel-7.4-150300.4.43.1
libfrr0-7.4-150300.4.43.1
libfrr_pb0-7.4-150300.4.43.1
libfrrcares0-7.4-150300.4.43.1
libfrrfpm_pb0-7.4-150300.4.43.1
libfrrgrpc_pb0-7.4-150300.4.43.1
libfrrospfapiclient0-7.4-150300.4.43.1
libfrrsnmp0-7.4-150300.4.43.1
libfrrzmq0-7.4-150300.4.43.1
libmlag_pb0-7.4-150300.4.43.1

Ссылки

Описание

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:frr-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:frr-devel-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfrr0-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfrr_pb0-7.4-150300.4.43.1
Ссылки

Описание

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:frr-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:frr-devel-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfrr0-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfrr_pb0-7.4-150300.4.43.1
Ссылки

Описание

Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:frr-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:frr-devel-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfrr0-7.4-150300.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libfrr_pb0-7.4-150300.4.43.1
Ссылки
Уязвимость SUSE-SU-2026:2644-1