Denial of Service Vulnerability in FRRouting Package frr10 - Important Security Update
Summary
ALSA-2026:49607: Important: frr10 security, bug fix, and enhancement update. Affects frr10 versions < 10.4.3-3.el9_8.2. Fixed in 10.4.3-3.el9_8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
FRRouting (frr10) is an open-source software suite that manages TCP/IP-based routing protocols, designed to handle the complexities of modern internet routing. It supports various protocols including BGP4, OSPFv2, OSPFv3, and more. This package is a fork of Quagga and is widely used in network environments to facilitate efficient routing. However, it has recently been identified to have a vulnerability that could lead to a Denial of Service (DoS) attack.
Vulnerability Detail
The vulnerability identified as CVE-2026-37460 allows an attacker to exploit a crafted BGP UPDATE message, potentially leading to a Denial of Service condition. This means that the affected system could become unresponsive or crash, disrupting network services. The issue arises from improper handling of specific BGP messages, which can be manipulated to trigger the vulnerability.
How To Fix
Minimum fixed version
10.4.3-3.el9_8.2
This is the first release that contains the fix.
sudo dnf update frr10Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available security update as soon as possible.
Conclusion
The frr10 package has a critical vulnerability that could lead to Denial of Service attacks. It is crucial for users to update to the latest patched version to ensure the security and reliability of their network services. Regular monitoring and prompt updates are essential practices for maintaining system integrity.
See every vulnerability recorded for frr10 →
FAQ
CVE-2026-37460 is a vulnerability in the FRRouting package that allows for Denial of Service attacks via crafted BGP UPDATE messages.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to update the package may leave your system vulnerable to attacks that could disrupt network services, leading to potential downtime and loss of connectivity.
While there are no specific workarounds available, monitoring your network for unusual activity can help mitigate risks until the update is applied.
For more details, refer to the CVE page associated with CVE-2026-37460, which provides in-depth information about the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for frr10.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
