CVE-2024-31951

A buffer overflow vulnerability was found in FRRouting. There can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs.

The vulnerability in the Opaque LSA Extended Link parser in FRRouting (FRR), which allows for a buffer overflow and potential daemon crash when processing OSPF LSA packets with improperly validated Segment Routing Adjacency SID subTLVs, is classified as a moderate severity issue. While the vulnerability can lead to service disruption due to daemon crashes, it requires specific conditions to be met for exploitation. An attacker would need to craft OSPF LSA packets with malicious Segment Routing Adjacency SID subTLVs and successfully send them to the vulnerable FRRouting instance. This requires knowledge of the network topology and access to send OSPF packets to the targeted router. Additionally, exploitation may not result in arbitrary code execution, limiting the potential impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.