In FRRouting (FRR) through 9.1, it is possible for the getedge() function in ospfte.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "frr", "binary_version": "8.1-1ubuntu1.10" }, { "binary_name": "frr-dbgsym", "binary_version": "8.1-1ubuntu1.10" }, { "binary_name": "frr-doc", "binary_version": "8.1-1ubuntu1.10" }, { "binary_name": "frr-pythontools", "binary_version": "8.1-1ubuntu1.10" }, { "binary_name": "frr-rpki-rtrlib", "binary_version": "8.1-1ubuntu1.10" }, { "binary_name": "frr-rpki-rtrlib-dbgsym", "binary_version": "8.1-1ubuntu1.10" }, { "binary_name": "frr-snmp", "binary_version": "8.1-1ubuntu1.10" }, { "binary_name": "frr-snmp-dbgsym", "binary_version": "8.1-1ubuntu1.10" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "frr", "binary_version": "8.4.4-1.1ubuntu6.1" }, { "binary_name": "frr-dbgsym", "binary_version": "8.4.4-1.1ubuntu6.1" }, { "binary_name": "frr-doc", "binary_version": "8.4.4-1.1ubuntu6.1" }, { "binary_name": "frr-pythontools", "binary_version": "8.4.4-1.1ubuntu6.1" }, { "binary_name": "frr-rpki-rtrlib", "binary_version": "8.4.4-1.1ubuntu6.1" }, { "binary_name": "frr-rpki-rtrlib-dbgsym", "binary_version": "8.4.4-1.1ubuntu6.1" }, { "binary_name": "frr-snmp", "binary_version": "8.4.4-1.1ubuntu6.1" }, { "binary_name": "frr-snmp-dbgsym", "binary_version": "8.4.4-1.1ubuntu6.1" } ] }