CVE-2024-31950

2024-04-0721:15:07

Google

osv.dev

frrouting

buffer overflow

daemon crash

ospf_te_parse_ri

ospf lsa

segment routing subtlvs

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

CPENameOperatorVersion
frreqbase_8.4
frreqfrr-5.1-de
frreqfrr-7.5-de
frreqfrr-3.0-rc1
frreqbase_8.3
frreqfrr-7.3-de
frreqreindent-master-after
frreqfrr-7.1-de
frreqbase_8.0
frreqbase_8.1

Name	Operator	Version
frr	eq	base_8.4
frr	eq	frr-5.1-de
frr	eq	frr-7.5-de
frr	eq	frr-3.0-rc1
frr	eq	base_8.3
frr	eq	frr-7.3-de
frr	eq	reindent-master-after
frr	eq	frr-7.1-de
frr	eq	base_8.0
frr	eq	base_8.1