frrouting bgpd

The frrouting bgpd tag covers discussions about FRRouting's BGP daemon, particularly security vulnerabilities affecting the routing control plane. A key topic is CVE-2026-37457, a high-severity denial-of-service flaw in FRRouting's BGP FlowSpec handling that involves an off-by-one out-of-bounds write in bgp_flowspec_op_decode(). While not a Windows vulnerability, it matters to Windows network administrators because Windows networks often rely on Linux-based routing stacks, virtual appliances, and cloud images that incorporate open-source routing code. The tag highlights how software memory bugs in routing daemons can lead to infrastructure outages, emphasizing the importance of patching and monitoring for such CVEs in mixed environments.