CVE-2024-31949

2024-04-0700:00:00

ubuntu.com

frrouting

infinite loop

vulnerability

mp/gr capability

dynamic capability

malformed data

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a
MP/GR capability as a dynamic capability because malformed data results in
a pointer not advancing.

Notes

Author	Note
sbeattie	the quagga project was renamed to frr
mdeslaur	The pointer increase happens before the continue statements in 7.x and 8.x, so marking as not-affected.