NULL pointer dereference in frr - CVE-2024-34088

Vulnerability identifier: #VU90722

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-34088

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the get_edge() function in ospf_te.c. A remote attacker can send specially crafted packets to the daemon and perform a denial of service (DoS) attack.

frr
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
Server Applications Module
openSUSE Leap
Ubuntu
frr (Ubuntu package)
frr-devel
libmlag_pb0-debuginfo
frr-debuginfo
libfrrsnmp0-debuginfo
libmlag_pb0
libfrrfpm_pb0-debuginfo
libfrr0-debuginfo
frr
libfrrsnmp0
libfrr_pb0-debuginfo
libfrrfpm_pb0
libfrrospfapiclient0
libfrr0
libfrrcares0-debuginfo
libfrrospfapiclient0-debuginfo
frr-debugsource
libfrr_pb0
libfrrzmq0
libfrrzmq0-debuginfo
libfrrcares0

Install updates from vendor's website.

frr (Ubuntu package) - addressed in versions 8.1-1ubuntu1.10, 8.4.4-1.1ubuntu1.4, 8.4.4-1.1ubuntu6.1
frr-devel - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libmlag_pb0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
frr-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrsnmp0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libmlag_pb0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrfpm_pb0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrr0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
frr - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrsnmp0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrr_pb0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrfpm_pb0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrospfapiclient0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrr0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrcares0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrospfapiclient0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
frr-debugsource - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrr_pb0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrzmq0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrzmq0-debuginfo - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1
libfrrcares0 - addressed in versions 8.4-150500.4.23.1, 8.5.6-150500.4.30.1

• https://github.com/FRRouting/frr/pull/15674/commits/34d704fb0ea60dc5063af477a2c11d4884984d4f

• Multiple vulnerabilities in FRRouting
• Ubuntu update for frr
• SUSE update for frr
• SUSE update for frr