CVE-2022-26129

HIGH

FRRouting < 8.1 - Buffer Overflow in Babeld Message SubTLV Parsing

Title source: llm

Description

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and parse_update_subtlv in babeld/message.c.

References (3)

Core 3

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/FRRouting/frr/issues/10503

Mailing List

https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html

Mailing List

https://lists.debian.org/debian-lts-announce/2024/09/msg00007.html

Scores

CVSS v3 7.8

EPSS 0.0101

EPSS Percentile 58.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-119

Status published

Products (1)

frrouting/frrouting < 8.1

Published Mar 03, 2022

Tracked Since Feb 18, 2026