CVE-2026-28532

Katalog CVE

CVSS 6.5 · Medium EPSS 0,37%

Kerentanan Out-of-bounds Read pada frrouting. Skor CVSS 3.1 6.5 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. Attackers with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.

Rincian

Terbit di NVD

30 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber vulncheck.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read
CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 29,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FRRouting/frr/commit/f098decf02987fbf1c891766c1516ac832adadfd patch
• https://github.com/FRRouting/frr/pull/21002 issue tracking · patch
• https://www.vulncheck.com/advisories/frrouting-integer-overflow-in-ospf-tlv-parser-functions advisory pihak ketiga
• https://github.com/FRRouting/frr/releases/tag/frr-10.5.3 release notes