Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

FRR Routing Software Has a Security Flaw

published 4 months ago

Summary

A security issue was found in FRR, a software used for routing data. If exploited, it could allow an attacker to run unauthorized commands on a system. To protect your system, update your FRR software to the latest version.

What to do

Update redhat frr to version 0:7.5.1-24.el8_10.
Update redhat frr-debuginfo to version 0:7.5.1-24.el8_10.
Update redhat frr-debugsource to version 0:7.5.1-24.el8_10.
Update redhat frr-selinux to version 0:7.5.1-24.el8_10.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	frr	< 0:7.5.1-24.el8_10 Fix: upgrade to 0:7.5.1-24.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	frr-debuginfo	< 0:7.5.1-24.el8_10 Fix: upgrade to 0:7.5.1-24.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	frr-debugsource	< 0:7.5.1-24.el8_10 Fix: upgrade to 0:7.5.1-24.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	frr-selinux	< 0:7.5.1-24.el8_10 Fix: upgrade to 0:7.5.1-24.el8_10

Original advisory text

Red Hat Security Advisory: frr security update

References

https://access.redhat.com/errata/RHSA-2026:24340 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2464548 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24340.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-37457 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-37457 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-37457 Vendor Advisory
https://github.com/FRRouting/frr/commit/0e6882bc72c0278988a47b2f0f73b7a91099a25c Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published8 Jun 2026

Updated8 Jun 2026

First seen8 Jun 2026

Sources

RHSA-2026:24340 · OSV

Track software like this

Free during beta