CVE-2026-5107

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-5107
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5107.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-5107
Downstream
Related
Published
2026-03-30T05:00:19.025Z
Modified
2026-07-15T22:54:09.024631Z
Severity
  • 2.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator
Summary
FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control
Details

A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function processtype2route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.

Database specific 
{
    "cwe_ids": [
        "CWE-266",
        "CWE-284"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5107.json"
}
References

Affected packages

Git / github.com/frrouting/frr

Affected ranges

Type
GIT
Repo
https://github.com/frrouting/frr
Events
Introduced
c41ba202c3f821a43091781181c73772501034ae
Fixed
7676cad65114aa23adde583d91d9d29e2debd045
Database specific 
{
    "cpe": [
        "cpe:2.3:a:frrouting:frrouting:10.5.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:frrouting:frrouting:10.5.1:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "10.5.0"
        },
        {
            "last_affected": "10.5.0"
        },
        {
            "introduced": "10.5.1"
        },
        {
            "last_affected": "10.5.1"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

10.*
10.5.0
10.5.1

Database specific

vanir_signatures_modified 
"2026-07-15T22:54:09Z"
vanir_signatures 
[
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "309858907047205237897580473095809074700",
                "222615880213350509333864447474777056277",
                "71382495430921216026194148424765862646",
                "140982808662906853279900249895135436887"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/frrouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045",
        "id": "CVE-2026-5107-01c56c3f",
        "target": {
            "file": "bgpd/bgp_evpn_mh.c"
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1409.0,
            "function_hash": "48465980338777555228996229920367804521"
        },
        "signature_version": "v1",
        "source": "https://github.com/frrouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045",
        "id": "CVE-2026-5107-1fd1876d",
        "target": {
            "function": "bgp_evpn_type4_route_process",
            "file": "bgpd/bgp_evpn_mh.c"
        }
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "282147124414440420257133091010025652452",
                "58116171703406344158986504369459898812",
                "59805534075928271403927516560536479883",
                "323087614189101801880787146968875531959",
                "85110258112993758719432453781170511253",
                "312160519202952621865589452403075420681",
                "221762640638543859620609235853719657896",
                "181604849225036855719507687995749630998",
                "69837547169406747498179554913119530639"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/frrouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045",
        "id": "CVE-2026-5107-6318bf6c",
        "target": {
            "file": "bgpd/rfapi/rfapi_rib.c"
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 2061.0,
            "function_hash": "157499238891552097237064193212862864683"
        },
        "signature_version": "v1",
        "source": "https://github.com/frrouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045",
        "id": "CVE-2026-5107-954baada",
        "target": {
            "function": "rfapiRibBi2Ri",
            "file": "bgpd/rfapi/rfapi_rib.c"
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 2599.0,
            "function_hash": "230143969083548005036764116062763434646"
        },
        "signature_version": "v1",
        "source": "https://github.com/frrouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045",
        "id": "CVE-2026-5107-98effdaa",
        "target": {
            "function": "process_type2_route",
            "file": "bgpd/bgp_evpn.c"
        }
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "207262202442817487799008919024496480435",
                "139402499805387138438827967829576008491",
                "52474138479042036712732066317154248520",
                "191388891584098983115847002952184619870",
                "120415299796551961403836544837448706644",
                "68703053602961138868412001709603524492",
                "207442951457067792281084195098476060422"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/frrouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045",
        "id": "CVE-2026-5107-b08f2ba2",
        "target": {
            "file": "bgpd/bgp_evpn.c"
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1851.0,
            "function_hash": "98706549729377899364542509360232606406"
        },
        "signature_version": "v1",
        "source": "https://github.com/frrouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045",
        "id": "CVE-2026-5107-c1c489bf",
        "target": {
            "function": "process_type3_route",
            "file": "bgpd/bgp_evpn.c"
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5107.json"