AZL-86217

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86217.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-86217

Upstream

CVE-2026-37459

Published

2026-05-04T18:16:28Z

Modified

2026-08-28T17:47:58Z

Summary

CVE-2026-37459 affecting package frr for versions less than 10.5.4-1

Details

An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-37459

Affected packages

Azure Linux:3 / frr

Package

Name: frr
Purl: pkg:rpm/azure-linux/frr

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

10.5.4-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86217.json"