CVE-2024-31950: Buffer Overflow
In FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).
Other sources
In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.5.5-1 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 8.4.4-1.1~deb12u2 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 10.0.1-0.1 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 8.4.4-1.1~deb12u2Fixed in 10.3-3+deb13u1Fixed in 10.7.1-6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31950?
CVE-2024-31950 has been classified as a high severity vulnerability due to the potential for remote crashes and denial of service.
How do I fix CVE-2024-31950?
To mitigate CVE-2024-31950, upgrade to versions 7.5.1-1.1+deb11u2, 7.5.1-1.1+deb11u4, or 10.2.1-2 of the frr package.
What causes CVE-2024-31950?
CVE-2024-31950 is caused by a buffer overflow in FRRouting caused by unsafe handling of OSPF LSA packets.
Which software versions are affected by CVE-2024-31950?
CVE-2024-31950 affects FRRouting versions up to and including 8.4.4-1.1~deb12u1.
Is there a known exploit for CVE-2024-31950?
As of now, there is no public information available regarding a known exploit for CVE-2024-31950.