In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.
References
| Link | Resource |
|---|---|
| https://github.com/FRRouting/frr/pull/15628 | Issue Tracking Third Party Advisory |
| https://github.com/FRRouting/frr/pull/15628/commits/ba6a8f1a31e1a88df2de69ea46068e8bd9b97138 | Patch |
| https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html | Mailing List |
| https://github.com/FRRouting/frr/pull/15628 | Issue Tracking Third Party Advisory |
| https://github.com/FRRouting/frr/pull/15628/commits/ba6a8f1a31e1a88df2de69ea46068e8bd9b97138 | Patch |
| https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html | Mailing List |
Configurations
History
01 May 2025, 14:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:* | |
| First Time |
Frrouting frrouting
Frrouting |
|
| References | () https://github.com/FRRouting/frr/pull/15628 - Issue Tracking, Third Party Advisory | |
| References | () https://github.com/FRRouting/frr/pull/15628/commits/ba6a8f1a31e1a88df2de69ea46068e8bd9b97138 - Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html - Mailing List |
Information
Published : 2024-04-07 21:15
Updated : 2025-05-01 14:47
NVD link : CVE-2024-31948
Mitre link : CVE-2024-31948
CVE.ORG link : CVE-2024-31948
JSON object : View
Products Affected
frrouting
- frrouting
CWE
CWE-1287
Improper Validation of Specified Type of Input