CVE-2026-37460
Awaiting Analysis Awaiting Analysis - Queue
Heap-based Buffer Overflow in FRRouting BGP UPDATE Processing

Publication date: 2026-06-03

Last updated on: 2026-06-05

Assigner: MITRE

Description
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-03
Last Modified
2026-06-05
Generated
2026-06-24
AI Q&A
2026-06-03
EPSS Evaluated
2026-06-22
NVD
CVE-2026-37460
EUVD
EUVD-2026-34083
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
frrouting frr From 10.0 (inc) to 10.6 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is caused by missing input validation in the rfapiRibBi2Ri() function within the rfapi_rib.c file of FRRouting (FRR) versions stable/10.0 to stable/10.6.

An attacker can exploit this flaw by sending a specially crafted BGP UPDATE message, which triggers the vulnerability.

The result of this exploitation is a Denial of Service (DoS), meaning the targeted FRRouting service can be disrupted or made unavailable.

Impact Analysis

The primary impact of this vulnerability is a Denial of Service (DoS) condition on systems running affected versions of FRRouting.

This means that an attacker could cause the FRRouting service to crash or become unresponsive by sending a crafted BGP UPDATE message.

Such disruption can affect network routing stability and availability, potentially leading to network outages or degraded network performance.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-37460. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart