CVE-2024-27913

Name of the Vulnerable Software and Affected Versions FRRouting (FRR) versions through 9.1

Description The issue allows remote attackers to cause a denial of service, resulting in the ospfd daemon crash, via a malformed OSPF LSA packet. This occurs because of an attempted access to a missing attribute field in the ospf te parse te function in ospfd/ospf te.c.

Recommendations For FRRouting (FRR) versions through 9.1, update to a version that fixes the issue in the ospf te parse te function to prevent the denial of service. As a temporary workaround, consider restricting access to the ospfd daemon to minimize the risk of exploitation.