CVE-2024-31949: Medium severity Frrouting FRRouting vulnerability
In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 10.0.1-0.1 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 10.3-3+deb13u1Fixed in 10.7.1-6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31949?
CVE-2024-31949 is classified as a high-severity vulnerability due to its potential to cause an infinite loop.
How do I fix CVE-2024-31949?
To fix CVE-2024-31949, upgrade to the latest version of FRRouting above 9.1 where the issue is resolved.
Who is affected by CVE-2024-31949?
CVE-2024-31949 affects users of FRRouting versions up to and including 9.1.
What type of vulnerability is CVE-2024-31949?
CVE-2024-31949 is a vulnerability that results in an infinite loop when malformed data is processed.
Can CVE-2024-31949 be exploited remotely?
Yes, CVE-2024-31949 can potentially be exploited remotely if the affected FRRouting service is exposed.