CVE-2024-31949

2024-04-0721:15:07

Google

osv.dev

frrouting

infinite loop

cve-2024-31949

dynamic capability

malformed data

pointer

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.

CPENameOperatorVersion
frreqbase_8.4
frreqfrr-5.1-de
frreqfrr-7.5-de
frreqfrr-3.0-rc1
frreqbase_8.3
frreqfrr-7.3-de
frreqreindent-master-after
frreqfrr-7.1-de
frreqbase_8.0
frreqbase_8.1

Name	Operator	Version
frr	eq	base_8.4
frr	eq	frr-5.1-de
frr	eq	frr-7.5-de
frr	eq	frr-3.0-rc1
frr	eq	base_8.3
frr	eq	frr-7.3-de
frr	eq	reindent-master-after
frr	eq	frr-7.1-de
frr	eq	base_8.0
frr	eq	base_8.1