Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade frr | Aug 22, 2024 | Mar 3, 2022 |
| Debian | — | Upgrade frr | Apr 29, 2024 | Mar 3, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 3, 2022 |
| Suse | — | Upgrade libfrr0Upgrade libfrr_pb0Upgrade libfrrsnmp0Upgrade frrUpgrade libfrrospfapiclient0Upgrade libfrrcares0Upgrade libmlag_pb0Upgrade frr-develUpgrade libfrrfpm_pb0Upgrade libfrrgrpc_pb0Upgrade libfrrzmq0 | Mar 19, 2022 | Mar 3, 2022 |
| Ubuntu | — | Upgrade frr (Ubuntu Pro) | Jun 7, 2024 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub