Denial of Service Vulnerability in FRRouting Package: NULL Pointer Dereference in OSPF Daemon
Summary
DEBIAN-CVE-2024-34088: In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. Affects frr versions < 10.0.1-0.1. Fixed in 10.0.1-0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FRRouting (FRR) is an open-source routing software suite that provides implementations of various routing protocols, including OSPF, BGP, and others. It is widely used in networking environments for its flexibility and performance. The package is designed to facilitate the routing of network traffic efficiently. However, a vulnerability has been identified in the OSPF daemon of FRR, which could lead to service disruptions.
Vulnerability Detail
In FRRouting (FRR) versions up to 9.1, the get_edge() function in ospf_te.c can return a NULL pointer. If the calling functions do not properly handle this NULL value, it can result in a crash of the OSPF daemon, leading to a denial of service. This vulnerability can be exploited by attackers to disrupt network services, making it critical for users to address it promptly.
How To Fix
Minimum fixed version
10.0.1-0.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade frrTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, ensure that your network monitoring tools are in place to detect any crashes of the OSPF daemon. Additionally, you can implement redundancy in your routing setup to minimize the impact of potential service disruptions.
Conclusion
The identified vulnerability in the FRRouting package poses a significant risk of denial of service due to a NULL pointer dereference in the OSPF daemon. Users are strongly advised to update to the patched version to ensure network stability and security. Monitoring tools and redundancy can help mitigate risks until the update is applied.
See every vulnerability recorded for frr →
FAQ
The vulnerability can lead to a denial of service, causing the OSPF daemon to crash and disrupt network routing.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
FRRouting versions up to 9.1 are affected by this vulnerability.
Yes, a patched version 10.0.1-0.1 is available to fix this vulnerability.
If an immediate update is not possible, implement monitoring and redundancy to mitigate the impact of potential crashes.
References
Related vulnerabilities
Recent vulnerabilities recorded for frr.
