CVE-2024-31951: Buffer Overflow
In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).
Other sources
In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 7.5.1-1.1+deb11u2Fixed in 7.5.1-1.1+deb11u4Fixed in 10.2.1-2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.5.5-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31951?
CVE-2024-31951 has been categorized as a critical vulnerability due to the potential for buffer overflow and daemon crashes.
How do I fix CVE-2024-31951?
To mitigate CVE-2024-31951, you should upgrade to versions 7.5.1-1.1+deb11u2, 7.5.1-1.1+deb11u4, or 10.2.1-2 of the frr package.
What systems are affected by CVE-2024-31951?
CVE-2024-31951 affects versions of the frr package up to and including 8.4.4-1.1~deb12u1 on Debian-based systems.
What types of attacks does CVE-2024-31951 enable?
CVE-2024-31951 enables attackers to exploit buffer overflow vulnerabilities, potentially leading to remote crashes of the daemon.
Is CVE-2024-31951 specific to any protocol?
Yes, CVE-2024-31951 specifically affects the OSPF protocol implementation within the FRRouting software.