CVE-2024-31949

2024-04-0721:15:07

[email protected]

web.nvd.nist.gov

frrouting

infinite loop

vulnerability

dynamic capability

malformed data

pointer

9.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.

References

github.com/FRRouting/frr/pull/15640

github.com/FRRouting/frr/pull/15640/commits/30a332dad86fafd2b0b6c61d23de59ed969a219b

lists.debian.org/debian-lts-announce/2024/04/msg00019.html