CVE-2024-27913: Medium severity Frrouting FRRouting vulnerability
ospfteparsete in ospfd/ospfte.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/frrto a version that resolves this vulnerability.Fixed in 8.1-1ubuntu1.9 - Upgrade
Upgrade
ubuntu/frrto a version that resolves this vulnerability.Fixed in 8.4.4-1.1ubuntu1.3 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 8.4.4-1.1~deb12u2 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 9.1-0.1 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 8.4.4-1.1~deb12u2Fixed in 10.3-3+deb13u1Fixed in 10.7.1-6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27913?
CVE-2024-27913 has been classified as a high severity vulnerability that can lead to a denial of service by crashing the ospfd daemon.
How do I fix CVE-2024-27913?
To fix CVE-2024-27913, upgrade to the patched versions of FRRouting which include 9.1-0.1 or 8.1-1ubuntu1.9 for Ubuntu.
What causes the denial of service in CVE-2024-27913?
The denial of service in CVE-2024-27913 is caused by handling a malformed OSPF LSA packet that tries to access a missing attribute field.
Which versions of FRRouting are affected by CVE-2024-27913?
CVE-2024-27913 affects FRRouting versions up to and including 9.0.
Is CVE-2024-27913 remotely exploitable?
Yes, CVE-2024-27913 is remotely exploitable, allowing attackers to crash the ospfd daemon without any prior authentication.