Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-01 | 2 | Disclosure2 |
| 2026-05-29 | 1 | Disclosure1 |
| 2026-06-03 | 1 | Disclosure1 |
CVE-2026-37457 An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to… https://www.cve.org/CVERecord?id=CVE-2026-37457
Post summary
The article announces CVE-2026-37457, detailing an off-by-one out-of-bounds write in FRRouting's bgp_flowspec_op_decode(), but offers no PoC, exploitation or patch information.
🪟 Off-by-one in FRRouting’s FlowSpec decoder (CVE-2026-37457) = “here, have a DoS” via a crafted packet. Even if it’s not Windows, your network still bleeds when Linux edge boxes do. #Windows #Microsoft #Security #Networking https://windowsforum.com/threads/cve-2026-37457-frrouting-bgp-flowspec-off-by-one-dos-and-why-windows-teams-care.422009/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #NetworkSecurity #Cve202637457 https://t.co/dtHmplSvUF
Post summary
The article highlights CVE‑2026‑37457 as an off‑by‑one bug in FRRouting’s FlowSpec decoder that can cause a denial‑of‑service when a crafted packet is processed, affecting Linux edge boxes and potentially impacting network operations.
🔴 FRRouting (FRR), Out-of-bounds Write, #CVE-2026-37457 (Critical) -DC-May2026-44 https://dailycve.com/frrouting-frr-out-of-bounds-write-cve-2026-37457-critical-dc-may2026-44/
Post summary
The post announces the discovery of a new critical out-of-bounds write vulnerability (CVE-2026-37457) affecting FRRouting, with no evidence of PoC, exploit, or active exploitation.
🚨*CVE* CVE-2026-37457 An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to… https://www.cve.org/CVERecord?id=CVE-2026-37457 ----- Traducción: CVE-2026-37457 Una… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-37457, describing it as an off‑by‑one out‑of‑bounds write in FRRouting’s bgp_flowspec_op_decode function and linking to the CVE record for details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frrouting | frrouting | 10.0 | - | - |