CVE-2024-34088: Null Pointer Dereference
In FRRouting (FRR) through 9.1 it is possible for the getedge() function in ospfte.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value the OSPF daemon crashes leading to denial of service.
Other sources
In FRRouting (FRR) through 9.1, it is possible for the getedge() function in ospfte.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.5.3-6 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 8.4.4-1.1~deb12u2 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 10.0.1-0.1 - Upgrade
Upgrade
debian/frrto a version that resolves this vulnerability.Fixed in 8.4.4-1.1~deb12u2Fixed in 10.3-3+deb13u1Fixed in 10.7.1-6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34088?
CVE-2024-34088 has a severity level that could lead to a denial of service due to the OSPF daemon crashing.
How do I fix CVE-2024-34088?
To fix CVE-2024-34088, it is recommended to update to the patched versions of frr: 7.5.1-1.1+deb11u2, 7.5.1-1.1+deb11u4, or 10.2.1-2.
Which software is affected by CVE-2024-34088?
CVE-2024-34088 affects the FRRouting (FRR) software, specifically versions up to 8.4.4-1.1~deb12u1.
What causes the vulnerability in CVE-2024-34088?
The vulnerability in CVE-2024-34088 is caused by the get_edge() function in ospf_te.c returning a NULL pointer that is not handled properly.
What are the potential consequences of CVE-2024-34088?
The potential consequence of CVE-2024-34088 is a denial of service, leading to the crash of the OSPF daemon.