CVE-2022-26129: Frrouting

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and parse_update_subtlv in babeld/message.c.

Affected products

• Frrouting Frrouting: up to and including 8.1

Published 2022-03-03. Last modified 2026-06-17.