SUSE-SU-2026:2644-1: frr&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:2644-1 is a vulnerability in frr&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 26-06-2026PublishedVulnerability first disclosed.
- 27-06-2026Last modifiedVulnerability information updated.
Description
Security update for frr This update for frr fixes the following issues - CVE-2026-28532: Denial of Service due to integer overflow in OSPF TLV parser functions (bsc#1263859). - CVE-2026-37457: An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (bsc#1263863). - CVE-2026-37458: missing input validation in the `MP_REACH_NLRI` component allows authenticated attackers to cause a DoS via a crafted UPDATE message (bsc#1263974).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse4 products
- frr&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 7.4-150300.4.43.1
- frr&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 7.4-150300.4.43.1
- frr&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 7.4-150300.4.43.1
- frr&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 7.4-150300.4.43.1
1 vendor · 4 products