CVE-2023-47234 An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in FRRouting FRR Software Two vulnerabilities have been identified in FRRouting (FRR) affecting versions up to 9.0. CVE-2023-41361, published on August 29, 2023, involves a lack of checks for overly large software version lengths in bgpd/bgp_open.c. CVE-2023-46752, published on October 26, 2023, pertains to mishandling malformed MP_REACH_NLRI data, which can lead to a crash. 4 sources 50

Extracted Entities

CVEs (1)

Platforms (1)