CVE-2024-27913: Medium severity frrouting bgpd vulnerability
ospfteparsete in ospfd/ospfte.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27913?
CVE-2024-27913 has been classified as a high severity vulnerability that can lead to a denial of service by crashing the ospfd daemon.
How do I fix CVE-2024-27913?
To fix CVE-2024-27913, upgrade to the patched versions of FRRouting which include 9.1-0.1 or 8.1-1ubuntu1.9 for Ubuntu.
What causes the denial of service in CVE-2024-27913?
The denial of service in CVE-2024-27913 is caused by handling a malformed OSPF LSA packet that tries to access a missing attribute field.
Which versions of FRRouting are affected by CVE-2024-27913?
CVE-2024-27913 affects FRRouting versions up to and including 9.0.
Is CVE-2024-27913 remotely exploitable?
Yes, CVE-2024-27913 is remotely exploitable, allowing attackers to crash the ospfd daemon without any prior authentication.