CVE-2026-49838

A flaw was found in GoBGP, an open-source Border Gateway Protocol BGP implementation. A configured confederation eBGP peer can send a specially crafted BGP UPDATE message with a zero-length ASPATH attribute. This malformed message is improperly handled during validation, leading to an unchecked...

CVE-2026-49838

GoBGP , an open-source BGP implementation in Go, is vulnerable to a denial-of-service in its BGP UPDATE validator prior to version 4.7.0 . When a confederation eBGP peer sends a malformed UPDATE containing a zero-length AS_PATH , the attribute passes initial decoding but triggers an unchecked p.V...

EUVD-2026-75807

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49838 GoBGP confederation validation panics on empty AS_PATH attribute

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

TencentOS Server 3: frr (TSSA-2026:0894)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0894 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

MiracleLinux 9 : frr10-10.4.3-3.el9_8.2 (AXSA:2026-1591:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1591:03 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : frr-8.5.3-15.el9_8.1 (AXSA:2026-1592:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1592:05 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1060a / 20.1070a Security Update: frr (UTSA-2026-101083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101083 advisory. Missing input validation in the rfapiRibBi2Ri function rfapirib.c of FRRouting FRR stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service DoS via...

Alibaba Cloud Linux 3 : 0252: frr (ALINUX3-SA-2026:0252)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0252 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-37460: Missing input validation in the...

AlmaLinux 9 : frr10 (ALSA-2026:49607)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:49607 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: frr10 triggers SELinux denials when reading root's...

MiracleLinux 8 : frr-7.5.1-25.el8_10 (AXSA:2026-1459:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1459:04 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the...

CVE-2026-37462

A flaw was found in gobgp. An integer underflow vulnerability in the BGPUpdate.DecodeFromBytes function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This can disrupt network operations and make the affected...

RLSA-2026:49607 Important: frr10 security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga...

RLSA-2026:49527 Important: frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: Zebra is not...

frr security update

An update is available for frr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It suppor...

RockyLinux 9 : frr10 (RLSA-2026:49607)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49607 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: frr10 triggers SELinux denials when reading root's...

RockyLinux 9 : frr (RLSA-2026:49527)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49527 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: Zebra is not installing the route in the kernel after...

frr: FRRouting: Denial of Service via crafted BGP UPDATE message

A flaw was found in FRRouting FRR. Missing input validation in the rfapiRibBi2Ri function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This vulnerability can disrupt network services managed by FRR...

Important: Red Hat Security Advisory: frr security, bug fix, and enhancement update

An update for frr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: Red Hat Security Advisory: frr security update

An update for frr is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...