CVE-2022-37035 - CVE House
Back to Database
Status published High CVE-2022-37035

An issue was discovered in bgpd in FRRouting (FRR) 8.3....

Vulnerability Description

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-37035

Credits & Attribution

No credits recorded in the NVD database.

References

More from frrouting

View All →
CVE-2022-43681
An out-of-bounds read exists in the BGP daemon of FRRouting...
Medium 6.5
CVE-2022-40318
An issue was discovered in bgpd in FRRouting (FRR) through...
Medium 6.5
CVE-2022-40302
An issue was discovered in bgpd in FRRouting (FRR) through...
Unknown 0
CVE-2022-37032
An out-of-bounds read in the BGP daemon of FRRouting FRR...
Critical 9.1
CVE-2022-36440
A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in...
High 7.5

Affected Vendor

Affected Software

frrouting
Vulnerable Versions:
8.3

Timeline

Official Publish: August 2nd, 2022
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.