← Back to CVE Index

CVE-2022-26125

Disclosed 2022-03-03

Description

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c.

Severity & CVSS Score

7.5 HIGH CVSS 3.1
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Enumeration

CWE-IDName
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected FRR Versions

  • through 8.1.0

Versions prior to 8.4 are end-of-life and no longer receive security updates.

References

URLSource
https://github.com/FRRouting/frr/issues/10507 GitHub
https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html Debian

Git Fixes

Raw Data