Bug 2278067 (CVE-2024-34088) - CVE-2024-34088 frr: null pointer via get_edge() function can trigger a denial of service
Summary: CVE-2024-34088 frr: null pointer via get_edge() function can trigger a denial...
Keywords:
Status: NEW
Alias: CVE-2024-34088
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2278068
Blocks: 2278063
TreeView+ depends on / blocked
 
Reported: 2024-05-01 00:04 UTC by Robb Gatica
Modified: 2024-05-07 18:21 UTC (History)
0 users

Fixed In Version:
Doc Type: ---
Doc Text:
A flaw was found in FRRouting (FRR). Some functions do not check the return value of the get_edge function in the ospfd/ospf_te.c file, allowing a NULL pointer dereference, causing a crash in the OSPF daemon, resulting in a denial of service.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Robb Gatica 2024-05-01 00:04:36 UTC 
In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

https://github.com/FRRouting/frr/pull/15674/commits/34d704fb0ea60dc5063af477a2c11d4884984d4f
Comment 1 Robb Gatica 2024-05-01 00:05:10 UTC 
Created frr tracking bugs for this issue:

Affects: fedora-all [bug 2278068]
Note You need to log in before you can comment on or make changes to this bug.