CVE-2024-31948

2024-04-0700:00:00

ubuntu.com

frrouting

vulnerability

cve-2024-31948

bgp

update

packet

handling

crash

daemon

quagga project

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID
attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.

Notes

Author	Note
sbeattie	the quagga project was renamed to frr
mdeslaur	code is different in quagga, no indication it is vulnerable

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchfrr< 7.2.1-1ubuntu0.2+esm2UNKNOWN
ubuntu22.04noarchfrr< 8.1-1ubuntu1.10UNKNOWN
ubuntu23.10noarchfrr< 8.4.4-1.1ubuntu1.4UNKNOWN
ubuntu24.04noarchfrr< 8.4.4-1.1ubuntu6.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	frr	< 7.2.1-1ubuntu0.2+esm2	UNKNOWN
ubuntu	22.04	noarch	frr	< 8.1-1ubuntu1.10	UNKNOWN
ubuntu	23.10	noarch	frr	< 8.4.4-1.1ubuntu1.4	UNKNOWN
ubuntu	24.04	noarch	frr	< 8.4.4-1.1ubuntu6.1	UNKNOWN