Known vulnerabilities in frr

Software: frr
Software CPE: cpe:2.3:a:frrouting.org:frr:*:*:*:*:*:*:*:*
Total vulnerabilities: 37
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting frr frr is affected by 37 known vulnerabilities: 7 high, 29 medium, 1 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126425 - Incorrect Privilege Assignment
CVE-2026-5107
CWE-266 Low
No
No
10.6.0 17.04.2026 SB2026041781
SB2026041783
#VU116116 - Improper Resource Shutdown or Release
CVE-2024-55553
CWE-404 Medium
No
No
10.0.3, 10.1.2, 10.2.1, 10.3 25.09.2025 SB2025092543
SB2025092554
SB2025092556
and 1 more
#VU101850 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-31949
CWE-835 Medium
No
No
9.0.4, 10.1 19.12.2024 SB2024121927
SB2024122019
SB2025021864
#VU101031 - Improper input validation
CVE-2024-27913
CWE-20 Medium
No
No
9.0.3, 9.1.1 28.11.2024 SB2024112866
SB2024112867
SB2024121685
and 1 more
#VU97120 - Improper input validation
CVE-2024-44070
CWE-20 Medium
No
No
10.0.2, 10.1 11.09.2024 SB2024091102
SB2024091103
SB2024091110
and 8 more
#VU90723 - Memory corruption
CVE-2024-31951
CWE-119 Medium
No
No
- 03.06.2024 SB2024060324
SB2024060326
SB2024061104
and 3 more
#VU90722 - NULL Pointer Dereference
CVE-2024-34088
CWE-476 Medium
No
No
- 03.06.2024 SB2024060324
SB2024060326
SB2024061104
and 1 more
#VU90721 - Memory corruption
CVE-2024-31948
CWE-119 Medium
No
No
- 03.06.2024 SB2024060324
SB2024060326
SB2024060327
and 5 more
#VU90720 - Memory corruption
CVE-2024-31950
CWE-119 Medium
No
No
- 03.06.2024 SB2024060324
SB2024060326
SB2024061104
and 3 more
#VU82902 - Improper input validation
CVE-2023-46753
CWE-20 Medium
No
No
- 07.11.2023 SB20231107126
SB2023111547
SB2023111548
and 9 more
#VU82901 - Improper input validation
CVE-2023-46752
CWE-20 Medium
No
No
- 07.11.2023 SB20231107126
SB2023111548
SB2023111715
and 8 more
#VU82900 - Improper input validation
CVE-2023-47235
CWE-20 Medium
No
No
- 07.11.2023 SB20231107126
SB2023112144
SB2023120658
and 10 more
#VU82899 - Improper input validation
CVE-2023-47234
CWE-20 Medium
No
No
- 07.11.2023 SB20231107126
SB2023112144
SB2023120658
and 10 more
#VU82898 - Out-of-bounds read
CVE-2023-38407
CWE-125 Medium
No
No
8.5 07.11.2023 SB20231107125
SB2023112144
SB2023120658
and 9 more
#VU82897 - Improper input validation
CVE-2023-38406
CWE-20 Medium
No
No
8.4.3 07.11.2023 SB20231107124
SB2023112144
SB2023120658
and 9 more
#VU82896 - Out-of-bounds read
CVE-2022-43681
CWE-125 Medium
No
No
8.4.1 07.11.2023 SB20231107123
SB20231107128
SB20231018146
#VU82892 - Memory corruption
CVE-2023-41361
CWE-119 High
No
No
9.0.1 07.11.2023 SB2023091371
#VU82891 - Out-of-bounds read
CVE-2023-41359
CWE-125 Medium
No
No
8.5.3, 9.0.1 07.11.2023 SB2023091371
SB2023110753
SB2023110754
and 3 more
#VU81446 - Out-of-bounds read
CVE-2023-41360
CWE-125 Medium
No
No
8.5.3, 9.0.1 03.10.2023 SB2023091371
SB2023100349
SB2023101732
and 7 more
#VU81445 - NULL Pointer Dereference
CVE-2023-41909
CWE-476 Medium
No
No
8.5.3, 9.0.1 03.10.2023 SB2023091371
SB2023100349
SB2023100350
and 9 more


Showing elements 1 - 20 out of 37