CVE-2024-34088

2024-04-3019:15:23

Google

osv.dev

frrouting

denial of service

ospf

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

CPENameOperatorVersion
frreqbase_8.4
frreqfrr-5.1-de
frreqfrr-7.5-de
frreqfrr-3.0-rc1
frreqbase_8.3
frreqfrr-7.3-de
frreqreindent-master-after
frreqfrr-7.1-de
frreqbase_8.0
frreqbase_8.1

Name	Operator	Version
frr	eq	base_8.4
frr	eq	frr-5.1-de
frr	eq	frr-7.5-de
frr	eq	frr-3.0-rc1
frr	eq	base_8.3
frr	eq	frr-7.3-de
frr	eq	reindent-master-after
frr	eq	frr-7.1-de
frr	eq	base_8.0
frr	eq	base_8.1