https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T11:36:43.642238+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-28532 CVE-2026-28532 — FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions 2026-09-30T11:36:43.666094+00:00

Affected: FRRouting frr

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.

 https://db.gcve.eu/vuln/usn-8376-1 USN-8376-1 — frr vulnerabilities 2026-09-30T11:36:43.666191+00:00

Affected: Ubuntu:22.04:LTS: frr, Ubuntu:24.04:LTS: frr, Ubuntu:25.10: frr, Ubuntu:26.04:LTS: frr

It was discovered that FRR incorrectly handled certain OSPF Traffic Engineering and Segment Routing TLVs. An attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2026-28532)

It was discovered that FRR incorrectly handled certain BGP FlowSpec components. An attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2026-37457)

It was discovered that FRR did not properly validate certain MP_REACH_NLRI messages. An authenticated user could possibly use this issue to cause FRR to crash, resulting in a denial of service. (CVE-2026-37458)

It was discovered that FRR incorrectly handled processing certain BGP UPDATE messages. An attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 25.04 and Ubuntu 25.10. (CVE-2026-37459)