Every CVE Search/ Get API key

CVE-2024-34088

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the...

7.5 HighFix available

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.69%Up 0.6 points since May 1, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
CVE-2024-34088
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2024-35147 7.5

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
EUVD-2024-35147
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-96w6-xc3m-h7gp 7.5

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the...

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
GHSA-96w6-xc3m-h7gp
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
NVD 7.5

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
CVE-2024-34088
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 7.5

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
CVE-2024-34088
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-34088 7.5

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
DEBIAN-CVE-2024-34088
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2024-34088 7.5

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
UBUNTU-CVE-2024-34088
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-40261 No score

CVE-2024-34088 affecting package frr for versions less than 8.5.3-6

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Record
AZL-40261
Updated
2026-11-02
OSVopenSUSE-SU-2024:14038-1 No score

frr-8.4-12.1 on GA media

These are all security issues fixed in the frr-8.4-12.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14038-1
Updated
2026-11-02
OSVSUSE-SU-2024:1971-1 No score

Security update for frr

This update for frr fixes the following issues:

  • CVE-2024-34088: Fixed null pointer via get_edge() function can trigger a denial of service (bsc#1223786).
  • CVE-2024-31951: Fixed buffer overflow in ospf_te_parse_ext_link (bsc#1222528).
  • CVE-2024-31950: Fixed buffer overflow and daemon crash in ospf_te_parse_ri (bsc#1222526).
Record
SUSE-SU-2024:1971-1
Updated
2026-11-02
OSVSUSE-SU-2024:4090-1 No score

Security update for frr

This update for frr fixes the following issues:

Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for:

  • CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950, CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234, CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360, CVE-2023-41358,CVE-2023-38802,CVE-2023-38407,CVE-2023-38406, CVE-2023-3748,CVE-2023-31490,CVE-2023-31489 and other bugfixes. See https://frrouting.org/release/8.5.6/ for details.

The most recent frr 8.x series provides several new features, improvements and bug fixes for various protocols and daemons, especially for PIM/PIMv6/BGP and VRF support.

See https://frrouting.org/release/8.5/ for details and links.

Record
SUSE-SU-2024:4090-1
Updated
2026-11-02
OSVUSN-6794-1 No score

frr vulnerabilities

It was discovered that FRR incorrectly handled certain malformed BGP and OSPF packets. A remote attacker could use this issue to cause FRR to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-6794-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
frr
Azure Linux:2
 before 8.5.3-6
8.5.3-6
frr
Debian:12
 before 8.4.4-1.1~deb12u2, plus listed versions
8.4.2-18.4.4-18.4.4-1.1~deb12u1
8.4.4-1.1~deb12u2
frr
Debian:13
 before 10.0.1-0.1
10.0.1-0.1
frr
Debian:14
 before 10.0.1-0.1
10.0.1-0.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP5
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP5
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
Show 7 moreShow less
Affected packages
PackageAffectedFixed
frr
openSUSE:Leap 15.5
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
frr
openSUSE:Leap 15.6
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
frr
Ubuntu:22.04:LTS
 before 8.1-1ubuntu1.10, plus listed versions
7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.2
Show 7 moreShow less
8.1-1ubuntu1.38.1-1ubuntu1.48.1-1ubuntu1.58.1-1ubuntu1.68.1-1ubuntu1.78.1-1ubuntu1.88.1-1ubuntu1.9
8.1-1ubuntu1.10
frr
Ubuntu:24.04:LTS
 before 8.4.4-1.1ubuntu6.1, plus listed versions
8.4.4-1.1ubuntu18.4.4-1.1ubuntu38.4.4-1.1ubuntu48.4.4-1.1ubuntu58.4.4-1.1ubuntu6
8.4.4-1.1ubuntu6.1
frr
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 8.1-1ubuntu1.10, plus listed versions
7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.2
Show 7 moreShow less
8.1-1ubuntu1.38.1-1ubuntu1.48.1-1ubuntu1.58.1-1ubuntu1.68.1-1ubuntu1.78.1-1ubuntu1.88.1-1ubuntu1.9
8.1-1ubuntu1.10
frr
Ubuntu:24.04:LTS
From an advisory covering 4 CVEs
 before 8.4.4-1.1ubuntu6.1, plus listed versions
8.4.4-1.1ubuntu18.4.4-1.1ubuntu38.4.4-1.1ubuntu48.4.4-1.1ubuntu58.4.4-1.1ubuntu6
8.4.4-1.1ubuntu6.1
frr
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 8.4-12.1
8.4-12.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-34088 is a high vulnerability (CVSS 7.5) in Frrouting, published April 30, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 52nd percentile. Fixed in frr 8.5.3-6.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open