In FRRouting (FRR) up to and including 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.
Debian Bug report logs -
#1072126
frr: CVE-2024-31948
Package:
src:frr;
Maintainer for src:frr is David Lamparter <equinox-debian@diac24net>;
Reported by: Moritz Mühlenhoff <jmm@inutilorg>
Date: Tue, 28 May 2024 21:39:04 UTC
Severity: grave
Tags: security, upstream
Reply or subscribe to this bug
Toggle usel ...