CVE-2024-27913

2024-02-2900:00:00

ubuntu.com

frrouting

remote attack

denial of service

ospf

missing attribute field

vulnerability

AI Score

7.1

Confidence

High

EPSS

Percentile

9.0%

JSON

ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows
remote attackers to cause a denial of service (ospfd daemon crash) via a
malformed OSPF LSA packet, because of an attempted access to a missing
attribute field.

Notes

Author	Note
sbeattie	the quagga project was renamed to frr

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchfrr< 8.1-1ubuntu1.9UNKNOWN
ubuntu23.10noarchfrr< 8.4.4-1.1ubuntu1.3UNKNOWN
ubuntu24.04noarchfrr< 8.4.4-1.1ubuntu4UNKNOWN