Critical Denial of Service Vulnerability in FRRouting Package
Summary
ALSA-2026:24371: Important: frr security update. Affects frr versions < 8.5.3-13.el9_8. Fixed in 8.5.3-13.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FRRouting (frr) is an open-source software suite that provides implementations of various TCP/IP routing protocols, including BGP, OSPF, and RIP. It is widely used in network environments to manage routing decisions and optimize traffic flow. The package is essential for maintaining efficient network operations, but it has been found to have a significant security vulnerability that could lead to service disruptions.
Vulnerability Detail
The vulnerability identified as CVE-2026-37457 allows for a denial of service attack through a crafted FlowSpec component. This means that an attacker could exploit this flaw to disrupt the normal functioning of the FRRouting service, potentially causing network outages or degraded performance. The vulnerability arises from improper handling of specific input data, which can lead to resource exhaustion and crash the service.
How To Fix
Minimum fixed version
8.5.3-13.el9_8
This is the first release that contains the fix.
sudo dnf update frrTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit access to the FRRouting service by implementing firewall rules that restrict incoming traffic to trusted sources only. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The discovery of the denial of service vulnerability in the FRRouting package highlights the importance of maintaining updated software to ensure network security. By applying the recommended updates and following best practices, users can protect their systems from potential exploits.
See every vulnerability recorded for frr →
FAQ
FRRouting is a free software suite that manages TCP/IP based routing protocols, providing essential functionalities for network routing.
CVE-2026-37457 is the identifier for a specific vulnerability in the FRRouting package that allows for denial of service attacks.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to denial of service, causing network outages and impacting the performance of routing services.
Yes, a patch is available in version 8.5.3-13.el9_8 of the FRRouting package. It is recommended to update to this version to mitigate the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for frr.
