CVE-2026-37457

A flaw was found in FRRouting (FRR). A remote attacker can exploit an off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function by supplying a specially crafted FlowSpec component. This issue can lead to a Denial of Service (DoS).

This vulnerability allows an unauthenticated remote attacker to cause a denial of service via a specially crafted FlowSpec component. Due to this reason, this issue has been rated with an important severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.