CVE-2022-26125: Buffer Overflow
Published Mar 3, 2022
·Updated
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isistlvs.c.
Affected Software
2 affected componentsFixes available
debian/frr<=6.0.2-2+deb10u1, <=7.5.1-1.1+deb10u1, <=7.5.1-1.1+deb11u2
8.4.4-1.1~deb12u18.4.4-1.1
Frrouting FRRouting<=8.1
Event History
Mar 3, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-26125?
CVE-2022-26125 is a vulnerability in FRRouting that allows buffer overflow due to incorrect input packet length checks.
2
What is the severity of CVE-2022-26125?
CVE-2022-26125 has a severity rating of 7.8 (high).
3
How does CVE-2022-26125 impact FRRouting?
CVE-2022-26125 can lead to buffer overflow vulnerabilities in FRRouting versions up to 8.1.0.
4
Is there a fix available for CVE-2022-26125?
Yes, a fix is available for CVE-2022-26125 in FRRouting version 8.4.4-1.1~deb12u1 and later.
5
Where can I find more information about CVE-2022-26125?
You can find more information about CVE-2022-26125 on the GitHub issue (https://github.com/FRRouting/frr/issues/10507) and the Debian security tracker (https://security-tracker.debian.org/tracker/CVE-2022-26125).