Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81087.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-81087
Upstream
Published
2026-03-30T06:16:05Z
Modified
2026-08-28T17:47:55Z
Summary
CVE-2026-5107 affecting package frr for versions less than 10.5.0-2
Details

A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.

References

Affected packages

Azure Linux:3 / frr

Package

Name
frr
Purl
pkg:rpm/azure-linux/frr

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
10.5.0-2

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81087.json"