CVE-2024-31950

2024-04-0700:00:00

ubuntu.com

frrouting

buffer overflow

ospf

daemon crash

segment routing

subtlvs

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon
crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read
Segment Routing subTLVs (their size is not validated).

Notes

Author	Note
sbeattie	the quagga project was renamed to frr

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchfrr< 8.1-1ubuntu1.10UNKNOWN
ubuntu23.10noarchfrr< 8.4.4-1.1ubuntu1.4UNKNOWN
ubuntu24.04noarchfrr< 8.4.4-1.1ubuntu6.1UNKNOWN