CVE-2026-5107

EUVD-2026-17060

30.03.2026, 06:16

A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.2 MEDIUM	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 19%

Affected Products (NVD)

Vendor	Product	Version
frrouting	frrouting	10.5.0
frrouting	frrouting	10.5.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

frr

bookworm	vulnerable
bookworm (security)	8.4.4-1.1~deb12u2 fixed
bullseye	vulnerable
bullseye (security)	vulnerable
forky	10.6.1-2 fixed
sid	10.6.1-2 fixed
trixie	vulnerable
trixie (security)	10.3-3+deb13u1 fixed

openSUSE / SLES Releases

openSUSE Product

Release

frr

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 12 SP5	8.5.7-8.16.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

frr-devel

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 12 SP5	8.5.7-8.16.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libfrr0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 12 SP5	8.5.7-8.16.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libfrr_pb0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libfrrcares0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 12 SP5	8.5.7-8.16.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libfrrfpm_pb0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libfrrgrpc_pb0

suse enterprise server 15 SP4

7.4-150300.4.40.1

fixed

libfrrospfapiclient0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 12 SP5	8.5.7-8.16.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libfrrsnmp0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 12 SP5	8.5.7-8.16.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libfrrzmq0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libmgmt_be_nb0

suse enterprise sap 15 SP7	10.2.6-150700.3.10.1 fixed
suse enterprise server 15 SP7	10.2.6-150700.3.10.1 fixed

libmlag_pb0

suse enterprise sap 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise sap 15 SP7	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP4	7.4-150300.4.40.1 fixed
suse enterprise server 15 SP5	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP6	8.5.7-150500.4.43.1 fixed
suse enterprise server 15 SP7	8.5.7-150500.4.43.1 fixed

Azure Linux Releases

Azure Package

Release

frr

Azure Linux 3.0

0:10.5.0-2.azl3

fixed

Common Weakness Enumeration

CWE-266 - Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References

https://github.com/FRRouting/frr/

https://github.com/FRRouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045

https://github.com/FRRouting/frr/pull/21098

https://vuldb.com/submit/780123

https://vuldb.com/vuln/354132

https://vuldb.com/vuln/354132/cti