CVE-2022-42917

A flaw was found in FRRouting FRR. A local service user can exploit a Time-of-check to time-of-use TOCTOU race condition by monitoring the configuration directory and replacing configuration files with symbolic links during their creation. This manipulation allows the user to change the ownership...

EUVD-2022-56059

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

DEBIAN-CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

UBUNTU-CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

SUSE: CVE-2022-42917: SUSE Linux Security Advisory

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

Linux Distros Unpatched Vulnerability : CVE-2022-42917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing...

CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

CVE-2022-42917

In FRRouting (FRR) before 8.5 , the frr service user can escalate privileges to root by exploiting a TOCTOU race condition caused by the combination of touch and chown during configuration file creation in /etc/frr. An attacker with access to the frr user can monitor the configuration directory a...

CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

TencentOS Server 3: frr (TSSA-2026:0894)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0894 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: frr (TSSA-2026:0866)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0866 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

MiracleLinux 9 : frr10-10.4.3-3.el9_8.2 (AXSA:2026-1591:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1591:03 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : frr-8.5.3-15.el9_8.1 (AXSA:2026-1592:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1592:05 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1060a / 20.1070a Security Update: frr (UTSA-2026-101083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101083 advisory. Missing input validation in the rfapiRibBi2Ri function rfapirib.c of FRRouting FRR stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service DoS via...

CVE-2026-74561

In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6ilist walk in nhrtcacheflush nhrtcacheflush walks nh-f6ilist during an RTNL-serialized nexthop replace without holding nh-lock, racing the unlocked IPv6 route add/delete that mutate the list under nh-loc...

Alibaba Cloud Linux 3 : 0252: frr (ALINUX3-SA-2026:0252)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0252 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-37460: Missing input validation in the...