CLSA-2026-1786095204
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786095204.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1786095204
- Upstream
CVE (2)
- Published
- 2026-08-07T09:33:34Z
- Modified
- 2026-10-26T09:31:26Z
- Summary
- frr: Fix of CVE-2026-37460
- Details
-
- CVE-2026-37460: fix missing input validation in the rfapiRibBi2Ri() RFP-option parser (bgpd/rfapi/rfapi_rib.c) allowing a bgpd DoS via a crafted BGP UPDATE with a short or zero-length VNC RFPOPTION subTLV. Scoped to the rfapi_rib.c hunk of upstream 7676cad6 to match NVD, which defines this CVE as rfapiRibBi2Ri() only; the same commit's bgp_evpn.c and bgp_evpn_mh.c hunks belong to CVE-2026-5107 and are not included
- References
Affected packages
TuxCare:AlmaLinux:9.6 / frr
Package
- Name
- frr
- Purl
- pkg:rpm/tuxcare/frr?distro=almalinux-9.6