CVE-2026-37457: n/a
CVE-2026-37457 is an off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function of FRRouting (FRR) stable/10.0. This flaw allows attackers to cause a denial of service (DoS) by supplying a crafted FlowSpec component. The vulnerability affects FRR versions from 10.0.0 up to and including 10.4.3. Red Hat has issued a security advisory with an important severity rating and provides updated packages that fix this issue.
AI Analysis
Technical Summary
An off-by-one out-of-bounds write vulnerability exists in the bgp_flowspec_op_decode() function within the bgpd/bgp_flowspec_util.c source file of FRRouting (FRR) stable/10.0. This vulnerability can be triggered by an attacker supplying a specially crafted FlowSpec component, leading to a denial of service condition. The issue is tracked as CVE-2026-37457 with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Red Hat has released updated FRR packages (version 10.4.4 and later) for Red Hat Enterprise Linux 10 and its variants to address this vulnerability.
Potential Impact
Successful exploitation of this vulnerability results in a denial of service (DoS) condition, impacting the availability of the affected FRRouting service. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability can be exploited remotely without authentication or user interaction.
Mitigation Recommendations
Red Hat has released patched versions of FRRouting (FRR) starting from version 10.4.4 to remediate this vulnerability. Users of affected Red Hat Enterprise Linux 10 versions should apply the available security updates as described in Red Hat advisory RHSA-2026:24347. No additional mitigation actions are required beyond applying the official update.
CVE-2026-37457: n/a
Description
CVE-2026-37457 is an off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function of FRRouting (FRR) stable/10.0. This flaw allows attackers to cause a denial of service (DoS) by supplying a crafted FlowSpec component. The vulnerability affects FRR versions from 10.0.0 up to and including 10.4.3. Red Hat has issued a security advisory with an important severity rating and provides updated packages that fix this issue.
CVSS v3.1
Score 7.5high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An off-by-one out-of-bounds write vulnerability exists in the bgp_flowspec_op_decode() function within the bgpd/bgp_flowspec_util.c source file of FRRouting (FRR) stable/10.0. This vulnerability can be triggered by an attacker supplying a specially crafted FlowSpec component, leading to a denial of service condition. The issue is tracked as CVE-2026-37457 with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Red Hat has released updated FRR packages (version 10.4.4 and later) for Red Hat Enterprise Linux 10 and its variants to address this vulnerability.
Potential Impact
Successful exploitation of this vulnerability results in a denial of service (DoS) condition, impacting the availability of the affected FRRouting service. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability can be exploited remotely without authentication or user interaction.
Mitigation Recommendations
Red Hat has released patched versions of FRRouting (FRR) starting from version 10.4.4 to remediate this vulnerability. Users of affected Red Hat Enterprise Linux 10 versions should apply the available security updates as described in Red Hat advisory RHSA-2026:24347. No additional mitigation actions are required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:24347
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-37459"]
- Cvss Version
- null
Threat ID: 6a27320ee29bf47b509bf30c
Added to database: 06/08/2026, 21:20:14 UTC
Last enriched: 07/15/2026, 15:49:44 UTC
Last updated: 07/31/2026, 19:24:46 UTC
Views: 606
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.