CVE-2024-34088

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-34088
In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/FRRouting/frr/pull/15674/commits/34d704fb0ea60dc5063af477a2c11d4884984d4f Patch
https://github.com/FRRouting/frr/pull/15674/commits/34d704fb0ea60dc5063af477a2c11d4884984d4f Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*
History

01 May 2025, 14:48

Type Values Removed Values Added
CPE cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:*
References () https://github.com/FRRouting/frr/pull/15674/commits/34d704fb0ea60dc5063af477a2c11d4884984d4f - () https://github.com/FRRouting/frr/pull/15674/commits/34d704fb0ea60dc5063af477a2c11d4884984d4f - Patch
First Time Frrouting frrouting
Frrouting
Information

Published : 2024-04-30 19:15

Updated : 2025-05-01 14:48

NVD link : CVE-2024-34088

Mitre link : CVE-2024-34088

CVE.ORG link : CVE-2024-34088

JSON object : View

Products Affected

frrouting

  • frrouting
CWE
CWE-476

NULL Pointer Dereference