UBUNTU-CVE-2026-120033

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-120033
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-120033
Upstream
Published
2026-11-13T00:00:00Z
Modified
2026-11-13T21:05:17Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/AU:N/R:A CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

In FRRouting 10.1 and later, bgpd does not correctly close a BGP session when the Send Hold Timer (RFC 9687) expires, i.e. when a neighbor has stopped accepting data from the router for twice the hold time. The connection is closed, but bgpd still considers the session to be up. A BGP neighbor that keeps sending KEEPALIVEs but stops reading from its connection, at a time when the router has a large amount of data to send to it (for example while sending it a full routing table), can trigger this. If the neighbor announced Graceful Restart support, bgpd crashes shortly after the session is closed, taking down all BGP sessions on the router, and the neighbor can repeat this each time bgpd restarts. Otherwise, the session stays stuck in the Established state: the neighbor's routes stay installed and keep being advertised to other peers, and the neighbor cannot reconnect until an operator clears the session manually. The neighbor does not need to be malicious; an overloaded or stuck peer can trigger the same behavior. No special configuration is required: any established BGP neighbor can trigger the issue, and Graceful Restart helper mode, which leads to the crash, is enabled by default.

References

Affected packages

Ubuntu:20.04:LTS
quagga

Package

Name
quagga
Purl
pkg:deb/ubuntu/quagga?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.2.4-4build1
1.2.4-4ubuntu0.1
1.2.4-4ubuntu0.4
1.2.4-4ubuntu0.5

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "quagga",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-bgpd",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-core",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-isisd",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-ospf6d",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-ospfd",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-pimd",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-ripd",
            "binary_version": "1.2.4-4ubuntu0.5"
        },
        {
            "binary_name": "quagga-ripngd",
            "binary_version": "1.2.4-4ubuntu0.5"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"
Ubuntu:22.04:LTS
frr

Package

Name
frr
Purl
pkg:deb/ubuntu/frr?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

7.*
7.5.1-1.1
8.*
8.1-1
8.1-1ubuntu1
8.1-1ubuntu1.1
8.1-1ubuntu1.2
8.1-1ubuntu1.3
8.1-1ubuntu1.4
8.1-1ubuntu1.5
8.1-1ubuntu1.6
8.1-1ubuntu1.7
8.1-1ubuntu1.8
8.1-1ubuntu1.9
8.1-1ubuntu1.10
8.1-1ubuntu1.11
8.1-1ubuntu1.13
8.1-1ubuntu1.14
8.1-1ubuntu1.15
8.1-1ubuntu1.16
8.1-1ubuntu1.17

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "frr",
            "binary_version": "8.1-1ubuntu1.17"
        },
        {
            "binary_name": "frr-pythontools",
            "binary_version": "8.1-1ubuntu1.17"
        },
        {
            "binary_name": "frr-rpki-rtrlib",
            "binary_version": "8.1-1ubuntu1.17"
        },
        {
            "binary_name": "frr-snmp",
            "binary_version": "8.1-1ubuntu1.17"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"
Ubuntu:24.04:LTS
frr

Package

Name
frr
Purl
pkg:deb/ubuntu/frr?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

8.*
8.4.4-1.1ubuntu1
8.4.4-1.1ubuntu3
8.4.4-1.1ubuntu4
8.4.4-1.1ubuntu5
8.4.4-1.1ubuntu6
8.4.4-1.1ubuntu6.1
8.4.4-1.1ubuntu6.2
8.4.4-1.1ubuntu6.3
8.4.4-1.1ubuntu6.4
8.4.4-1.1ubuntu6.5
8.4.4-1.1ubuntu6.6
8.4.4-1.1ubuntu6.7
8.4.4-1.1ubuntu6.8

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "frr",
            "binary_version": "8.4.4-1.1ubuntu6.8"
        },
        {
            "binary_name": "frr-pythontools",
            "binary_version": "8.4.4-1.1ubuntu6.8"
        },
        {
            "binary_name": "frr-rpki-rtrlib",
            "binary_version": "8.4.4-1.1ubuntu6.8"
        },
        {
            "binary_name": "frr-snmp",
            "binary_version": "8.4.4-1.1ubuntu6.8"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"
Ubuntu:26.04:LTS
frr

Package

Name
frr
Purl
pkg:deb/ubuntu/frr?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

10.*
10.4.1-3ubuntu1
10.4.1-3ubuntu2
10.5.1-1ubuntu1
10.5.1-1ubuntu2
10.5.1-1ubuntu3
10.5.1-1ubuntu4
10.5.1-1ubuntu4.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "frr",
            "binary_version": "10.5.1-1ubuntu4.1"
        },
        {
            "binary_name": "frr-pythontools",
            "binary_version": "10.5.1-1ubuntu4.1"
        },
        {
            "binary_name": "frr-rpki-rtrlib",
            "binary_version": "10.5.1-1ubuntu4.1"
        },
        {
            "binary_name": "frr-snmp",
            "binary_version": "10.5.1-1ubuntu4.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"
Ubuntu:26.10
frr

Package

Name
frr
Purl
pkg:deb/ubuntu/frr?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

10.*
10.5.1-1ubuntu4
10.5.1-1ubuntu5
10.5.1-1ubuntu6
10.7.0-2ubuntu1
10.7.1-1ubuntu1
10.7.1-3ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "frr",
            "binary_version": "10.7.1-3ubuntu1"
        },
        {
            "binary_name": "frr-pythontools",
            "binary_version": "10.7.1-3ubuntu1"
        },
        {
            "binary_name": "frr-rpki-rtrlib",
            "binary_version": "10.7.1-3ubuntu1"
        },
        {
            "binary_name": "frr-snmp",
            "binary_version": "10.7.1-3ubuntu1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"
Ubuntu:Pro:16.04:LTS
quagga

Package

Name
quagga
Purl
pkg:deb/ubuntu/quagga?arch=source&distro=esm-infra%2Fxenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.99.24.1-2
0.99.24.1-2ubuntu1
0.99.24.1-2ubuntu1.1
0.99.24.1-2ubuntu1.2
0.99.24.1-2ubuntu1.3
0.99.24.1-2ubuntu1.4
0.99.24.1-2ubuntu1.4+esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "quagga",
            "binary_version": "0.99.24.1-2ubuntu1.4+esm1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"
Ubuntu:Pro:18.04:LTS
quagga

Package

Name
quagga
Purl
pkg:deb/ubuntu/quagga?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1.1-3
1.1.1-3ubuntu1
1.2.2-1
1.2.2-1ubuntu1
1.2.4-1
1.2.4-1ubuntu0.1~esm1
1.2.4-1ubuntu0.1~esm2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "quagga",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-bgpd",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-core",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-isisd",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-ospf6d",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-ospfd",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-pimd",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-ripd",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        },
        {
            "binary_name": "quagga-ripngd",
            "binary_version": "1.2.4-1ubuntu0.1~esm2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"
Ubuntu:Pro:20.04:LTS
frr

Package

Name
frr
Purl
pkg:deb/ubuntu/frr?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.0.2-2build2
7.*
7.2-1ubuntu1
7.2-1ubuntu2
7.2.1-1
7.2.1-1ubuntu0.1
7.2.1-1ubuntu0.2
7.2.1-1ubuntu0.2+esm1
7.2.1-1ubuntu0.2+esm2
7.2.1-1ubuntu0.2+esm3
7.2.1-1ubuntu0.2+esm4
7.2.1-1ubuntu0.2+esm5

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "frr",
            "binary_version": "7.2.1-1ubuntu0.2+esm5"
        },
        {
            "binary_name": "frr-pythontools",
            "binary_version": "7.2.1-1ubuntu0.2+esm5"
        },
        {
            "binary_name": "frr-rpki-rtrlib",
            "binary_version": "7.2.1-1ubuntu0.2+esm5"
        },
        {
            "binary_name": "frr-snmp",
            "binary_version": "7.2.1-1ubuntu0.2+esm5"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-120033.json"