Logo
vulnerabilityCVE-2024-34088
Name
CVE-2024-34088
Source
NVD ( link)Debian ( link)
Description
In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
frr
Patched

Vulnerability Ratings#


7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
10.3
Not Affected
buildroot
master
10.5.4
Not Affected
openwrt
master
10.6.1-r1
Not Affected
yocto
master
10.6.1
Not Affected
yocto
scarthgap
9.1.3
Not Affected

Resolved with patches#


frr (yocto:kirkstone)

#
Title
Author
Resolve
1
ospfd: protect call to get_edge() in ospf_te.c
Olivier Dugeon <olivier.dugeon@orange.com>
CVE-2024-34088