CVE-2026-129217 | NetDEF FRRouting up to 10.5.1 bgpd bgpd/bgp_packet.c bgp_notify_decapsulate_hard_reset out-of-bounds

November 13, 2026 Yanac

A vulnerability classified as critical has been found in NetDEF FRRouting up to 10.5.1. This vulnerability affects the function bgp_notify_decapsulate_hard_reset of the file bgpd/bgp_packet.c of the component bgpd. This manipulation causes out-of-bounds read.

This vulnerability is registered as CVE-2026-129217. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More