CVE-2022-37035

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.

• CWE-362

• https://docs.google.com/document/d/1TqYEcZbFeDTMKe2N4XRFwyAjw_mynIHfvzwbx1fmJj8/edit?usp=sharingExploit, Third Party Advisory
• https://github.com/FRRouting/frr/issues/11698Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
• https://docs.google.com/document/d/1TqYEcZbFeDTMKe2N4XRFwyAjw_mynIHfvzwbx1fmJj8/edit?usp=sharingExploit, Third Party Advisory
• https://github.com/FRRouting/frr/issues/11698Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
• https://lists.debian.org/debian-lts-announce/2024/09/msg00007.html

Published

Aug 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37028ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS)…5.4
• CVE-2022-3703All versions of ETIC Telecom Remote Access Server (RAS) 4.5.…10
• CVE-2022-37030Weak permissions on the configuration file in the PAM module…7.8
• CVE-2022-37032An out-of-bounds read in the BGP daemon of FRRouting FRR bef…9.1
• CVE-2022-37033In dotCMS 5.x-22.06, TempFileAPI allows a user to create a t…6.5
• CVE-2022-37034In dotCMS 5.x-22.06, it is possible to call the TempResource…5.3
• CVE-2022-3704A vulnerability classified as problematic has been found in …5.4
• CVE-2022-37041An issue was discovered in ProxyServlet.java in the /proxy s…7.5
• CVE-2022-37042Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximpo…9.8
• CVE-2022-37043An issue was discovered in the webmail component in Zimbra C…5.7
• CVE-2022-37044In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/se…6.1
• CVE-2022-37047The component tcprewrite in Tcpreplay v4.4.1 was discovered …7.8