CVE-2024-31951

In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs lengths are not validated...

CVE-2024-31950

In FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA packets during an attempt to read Segment Routing subTLVs their size is not validated...

UBUNTU-CVE-2024-31948

In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...

CVE-2024-31948

In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...

CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

UBUNTU-CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

CVE-2024-31950: Buffer Copy without Checking Size of Input

In FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA packets during an attempt to read Segment Routing subTLVs their size is not validated...

CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

CVE-2024-31951

In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs lengths are not validated...

CVE-2024-31951

In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs lengths are not validated...

CVE-2024-31950

In FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA packets during an attempt to read Segment Routing subTLVs their size is not validated...

CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

CVE-2024-31950

The FRRouting (FRR) suite of internet routing protocol daemons, specifically versions through 9.1 , is vulnerable to a buffer overflow and daemon crash . The flaw exists in the ospf_te_parse_ri function when processing OSPF LSA packets because the size of Segment Routing subTLVs is not validated....

CVE-2024-31948: Improper Validation of Specified Type of Input

In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...

CVE-2024-31951

FRRouting (FRR) versions through 9.1 contain a buffer overflow vulnerability in the Opaque LSA Extended Link parser . Specifically, the ospf_te_parse_ext_link function fails to validate lengths when reading Segment Routing Adjacency SID subTLVs from OSPF LSA packets. This flaw can lead to a daemo...

CVE-2024-31948

In FRRouting (FRR) versions through 9.1 , a vulnerability exists where a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash. The root cause is identified as improper validation of the specified data type (CWE-1287), which allows a remote actor to trigger a de...

CVE-2024-31949

In FRRouting (FRR) versions through 9.1 , a vulnerability exists in the Dynamic Capability Handler component. When the software receives a MP/GR capability as a dynamic capability, malformed data can cause a pointer to fail to advance, resulting in an infinite loop . A remote attacker could explo...

FRRouting 安全漏洞

FRRouting is an open source network routing software suite from the FRRouting Project that runs on Unix-like platforms. A security vulnerability exists in FRRouting FRR versions 9.1 and earlier, which stems from incorrectly formatted data that can cause the pointer to fail to advance, resulting i...

CVE-2024-31951

In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs lengths are not validated...

CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...