CVE-2024-31951

2024-04-0700:00:00

ubuntu.com

cve-2024-31951

frrouting

buffer overflow

ospf

segment routing adjacency

daemon crash

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1,
there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link
for OSPF LSA packets during an attempt to read Segment Routing Adjacency
SID subTLVs (lengths are not validated).

Notes

Author	Note
sbeattie	the quagga project was renamed to frr

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchfrr< 8.1-1ubuntu1.10UNKNOWN
ubuntu23.10noarchfrr< 8.4.4-1.1ubuntu1.4UNKNOWN
ubuntu24.04noarchfrr< 8.4.4-1.1ubuntu6.1UNKNOWN