CVE-2022-26126: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Frrouting Frrouting: before 8.2 (fixed in 8.2)

Published 2022-03-03. Last modified 2026-06-17.