Summary
It was discovered that FRR incorrectly handled certain malformed OSPF and
update packets. A remote attacker could possibly use these issues to cause
FRR to crash, resulting in a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | frr | 8.1-1ubuntu1.14 |
| Ubuntu · 24.04 LTS 24.04:LTS | frr | 8.4.4-1.1ubuntu6.5 |
| Ubuntu · 25.10 | frr | 10.4.1-3ubuntu1.1 |
Vulnerabilities 9
-
High 7.5
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail…
-
High 7.5
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_du…
-
High 7.5
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_…
-
High 7.5
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_…
-
High 7.5
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_…
-
High 7.5
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_t…
-
High 7.5
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info…
-
High 7.5
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_…
-
High 7.5
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_…
References
-
report
https://ubuntu.com/security/CVE-2025-61099
-
report
https://ubuntu.com/security/CVE-2025-61100
-
report
https://ubuntu.com/security/CVE-2025-61101
-
report
https://ubuntu.com/security/CVE-2025-61102
-
report
https://ubuntu.com/security/CVE-2025-61103
-
report
https://ubuntu.com/security/CVE-2025-61104
-
report
https://ubuntu.com/security/CVE-2025-61105
-
report
https://ubuntu.com/security/CVE-2025-61106
-
report
https://ubuntu.com/security/CVE-2025-61107