CVE-2024-31951

2024-04-0721:15:07

Google

osv.dev

frrouting

opaque lsa

buffer overflow

ospf

daemon crash

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

CPENameOperatorVersion
frreqbase_8.4
frreqfrr-5.1-de
frreqfrr-7.5-de
frreqfrr-3.0-rc1
frreqbase_8.3
frreqfrr-7.3-de
frreqreindent-master-after
frreqfrr-7.1-de
frreqbase_8.0
frreqbase_8.1

Name	Operator	Version
frr	eq	base_8.4
frr	eq	frr-5.1-de
frr	eq	frr-7.5-de
frr	eq	frr-3.0-rc1
frr	eq	base_8.3
frr	eq	frr-7.3-de
frr	eq	reindent-master-after
frr	eq	frr-7.1-de
frr	eq	base_8.0
frr	eq	base_8.1