Executive brief
A vulnerability in FRRouting, a popular open-source routing protocol suite, could allow an attacker to crash the routing service. By sending a specially crafted network update message, an attacker can trigger a denial-of-service condition, potentially disrupting network connectivity and data flow across the infrastructure.
Technical details
A vulnerability exists in the rfapiRibBi2Ri() function within rfapi_rib.c of FRRouting (FRR) versions stable/10.0 through stable/10.6. The flaw is caused by insufficient input validation when handling BGP UPDATE messages, specifically related to EVPN and ENCAP/VNC packet parsing. A remote attacker can exploit this by sending a crafted BGP UPDATE message to a vulnerable instance, leading to a service crash (Denial of Service). A fix has been identified in the project's source code repository to improve packet validation.
Affected products
- FRRouting FRRouting stable/10.0 to stable/10.6
Timeline
- 2026-06-03: disclosed
- 2026-06-03: advisory