CVE-2022-26127

HIGH

FRRouting < 8.1 - Buffer Overflow in babel_packet_examin

Title source: llm

Description

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c.

References (3)

Core 3

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/FRRouting/frr/issues/10487

Mailing List

https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html

Mailing List

https://lists.debian.org/debian-lts-announce/2024/09/msg00007.html

Scores

CVSS v3 7.8

EPSS 0.0101

EPSS Percentile 58.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-119 CWE-1284

Status published

Products (1)

frrouting/frrouting < 8.1

Published Mar 03, 2022

Tracked Since Feb 18, 2026