CVE-2022-37032: Debian Linux

Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days.

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Frrouting Frrouting: before 8.4 (fixed in 8.4)

Published 2022-09-19. Last modified 2026-06-17.