Every CVE Search/ Get API key

CVE-2024-31950

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in...

6.5 MediumFix available

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.51%Up 0.5 points since Apr 8, 2024
90%50%10%1%

What each source reports

CVE List Score used 6.5

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
CVE-2024-31950
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-120
Updated
2026-11-02
EUVDEUVD-2024-29808 6.5

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
EUVD-2024-29808
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-36p4-cjjg-rccj 6.5

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in...

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
GHSA-36p4-cjjg-rccj
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-120
Updated
2026-11-02
NVD 6.5

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
CVE-2024-31950
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-120
Updated
2026-11-02
OSV 6.5

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
CVE-2024-31950
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2024-31950 6.5

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
DEBIAN-CVE-2024-31950
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2024-31950 6.5

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
UBUNTU-CVE-2024-31950
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVAZL-39878 No score

CVE-2024-31950 affecting package frr for versions less than 8.5.5-1

In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Record
AZL-39878
Updated
2026-11-02
OSVopenSUSE-SU-2024:14038-1 No score

frr-8.4-12.1 on GA media

These are all security issues fixed in the frr-8.4-12.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14038-1
Updated
2026-11-02
OSVSUSE-SU-2024:1971-1 No score

Security update for frr

This update for frr fixes the following issues:

  • CVE-2024-34088: Fixed null pointer via get_edge() function can trigger a denial of service (bsc#1223786).
  • CVE-2024-31951: Fixed buffer overflow in ospf_te_parse_ext_link (bsc#1222528).
  • CVE-2024-31950: Fixed buffer overflow and daemon crash in ospf_te_parse_ri (bsc#1222526).
Record
SUSE-SU-2024:1971-1
Updated
2026-11-02
OSVSUSE-SU-2024:4090-1 No score

Security update for frr

This update for frr fixes the following issues:

Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for:

  • CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950, CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234, CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360, CVE-2023-41358,CVE-2023-38802,CVE-2023-38407,CVE-2023-38406, CVE-2023-3748,CVE-2023-31490,CVE-2023-31489 and other bugfixes. See https://frrouting.org/release/8.5.6/ for details.

The most recent frr 8.x series provides several new features, improvements and bug fixes for various protocols and daemons, especially for PIM/PIMv6/BGP and VRF support.

See https://frrouting.org/release/8.5/ for details and links.

Record
SUSE-SU-2024:4090-1
Updated
2026-11-02
OSVUSN-6794-1 No score

frr vulnerabilities

It was discovered that FRR incorrectly handled certain malformed BGP and OSPF packets. A remote attacker could use this issue to cause FRR to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-6794-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
frr
Azure Linux:2
 before 8.5.5-1
8.5.5-1
frr
Debian:12
 before 8.4.4-1.1~deb12u2, plus listed versions
8.4.2-18.4.4-18.4.4-1.1~deb12u1
8.4.4-1.1~deb12u2
frr
Debian:13
 before 10.0.1-0.1
10.0.1-0.1
frr
Debian:14
 before 10.0.1-0.1
10.0.1-0.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP5
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 8.4-150500.4.23.1
8.4-150500.4.23.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP5
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
Show 7 moreShow less
Affected packages
PackageAffectedFixed
frr
openSUSE:Leap 15.5
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
frr
openSUSE:Leap 15.6
From an advisory covering 19 CVEs
 before 8.5.6-150500.4.30.1
8.5.6-150500.4.30.1
frr
Ubuntu:22.04:LTS
 before 8.1-1ubuntu1.10, plus listed versions
7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.2
Show 7 moreShow less
8.1-1ubuntu1.38.1-1ubuntu1.48.1-1ubuntu1.58.1-1ubuntu1.68.1-1ubuntu1.78.1-1ubuntu1.88.1-1ubuntu1.9
8.1-1ubuntu1.10
frr
Ubuntu:24.04:LTS
 before 8.4.4-1.1ubuntu6.1, plus listed versions
8.4.4-1.1ubuntu18.4.4-1.1ubuntu38.4.4-1.1ubuntu48.4.4-1.1ubuntu58.4.4-1.1ubuntu6
8.4.4-1.1ubuntu6.1
frr
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 8.1-1ubuntu1.10, plus listed versions
7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.2
Show 7 moreShow less
8.1-1ubuntu1.38.1-1ubuntu1.48.1-1ubuntu1.58.1-1ubuntu1.68.1-1ubuntu1.78.1-1ubuntu1.88.1-1ubuntu1.9
8.1-1ubuntu1.10
frr
Ubuntu:24.04:LTS
From an advisory covering 4 CVEs
 before 8.4.4-1.1ubuntu6.1, plus listed versions
8.4.4-1.1ubuntu18.4.4-1.1ubuntu38.4.4-1.1ubuntu48.4.4-1.1ubuntu58.4.4-1.1ubuntu6
8.4.4-1.1ubuntu6.1
frr
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 8.4-12.1
8.4-12.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-31950 is a medium vulnerability (CVSS 6.5) in Frrouting, published April 7, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in frr 8.5.5-1.

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open