CVE-2024-31951

In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs lengths are not validated...

CVE-2024-31951

A buffer overflow vulnerability exists in the Opaque LSA Extended Link parser of FRRouting (FRR) through version 9.1 . The flaw is located in the ospf_te_parse_ext_link function, where the software fails to validate lengths when reading Segment Routing Adjacency SID subTLVs from OSPF LSA packets....