Buffer Overflow Vulnerability in FRRouting Product by FRRouting

CVE-2022-26128

What is CVE-2022-26128?

A buffer overflow vulnerability was identified in the FRRouting implementation due to improper validation of input packet lengths in the babel_packet_examin function, located in babeld/message.c. This flaw could allow attackers to exploit the vulnerability by crafting malicious packets that, when processed, could lead to execution of arbitrary code or service disruption. Users are encouraged to update to the latest FRRouting version to mitigate potential risks associated with this vulnerability.

References