Medium WID-SEC-2025-2428 9 CVEs

FRRouting (ospf_opaque.c): Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 27, 2025 · Updated Jun 4, 2026 · Revision 8 · de-DE

Vendor: Debian Vendor: FRRouting Vendor: SUSE Vendor: Ubuntu Product: frrouting Product: Linux Product: Linux Product: Linux Product: openSUSE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FRRouting Project FRRouting ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

FRRouting (FRR) ist eine freie und quelloffene Internet-Routing-Protokollsuite für Linux- und Unix-Plattformen. Es implementiert BGP, OSPF, RIP, IS-IS, PIM, LDP, BFD, Babel, PBR, OpenFabric und VRRP, mit Alpha-Unterstützung für EIGRP und NHRP.

Vulnerabilities 9

High 7.5

CVE-2025-61099

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 27, 2025
High 7.5

CVE-2025-61100

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_du…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 27, 2025
High 7.5

CVE-2025-61101

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 27, 2025
High 7.5

CVE-2025-61102

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 27, 2025
High 7.5

CVE-2025-61103

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 28, 2025
High 7.5

CVE-2025-61104

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_t…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 28, 2025
High 7.5

CVE-2025-61105

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 27, 2025
High 7.5

CVE-2025-61106

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 28, 2025
High 7.5

CVE-2025-61107

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_…

frr frr quagga frr Debian Ubuntu Azure Linux

Oct 28, 2025

Revision history

2026-06-04 #8
Neue Updates von Debian aufgenommen
2026-05-31 #7
Neue Updates von SUSE aufgenommen
2026-05-10 #6
Neue Updates von SUSE aufgenommen
2026-03-26 #5
Neue Updates von SUSE aufgenommen
2026-02-26 #4
Neue Updates von SUSE aufgenommen
2026-02-17 #3
Neue Updates von openSUSE und Ubuntu aufgenommen
2025-10-28 #2
CVE's ergänzt
2025-10-27 #1
Initiale Fassung

References

NIST Vulnerability Database vom 2025-10-27
https://nvd.nist.gov/vuln/detail/CVE-2025-61099
NIST Vulnerability Database vom 2025-10-27
https://nvd.nist.gov/vuln/detail/CVE-2025-61100
NIST Vulnerability Database vom 2025-10-27
https://nvd.nist.gov/vuln/detail/CVE-2025-61101
NIST Vulnerability Database vom 2025-10-27
https://nvd.nist.gov/vuln/detail/CVE-2025-61102
NIST Vulnerability Database vom 2025-10-27
https://nvd.nist.gov/vuln/detail/CVE-2025-61105
FRRouting GitHub vom 2025-10-27
https://github.com/FRRouting/frr/issues/19471
openSUSE Security Update OPENSUSE-SU-2026:10207-1 vom 2026-02-17
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TWL45R5PNXRWM5EEYMU5MZO5Y53BVVHS/
Ubuntu Security Notice USN-8046-1 vom 2026-02-17
https://ubuntu.com/security/notices/USN-8046-1
SUSE Security Update SUSE-SU-2026:0665-1 vom 2026-02-27
https://lists.suse.com/pipermail/sle-security-updates/2026-February/024445.html
SUSE Security Update SUSE-SU-2026:1057-1 vom 2026-03-26
https://lists.suse.com/pipermail/sle-security-updates/2026-March/024950.html
SUSE Security Update SUSE-SU-2026:1063-1 vom 2026-03-26
https://lists.suse.com/pipermail/sle-security-updates/2026-March/024946.html
SUSE Security Update SUSE-SU-2026:21550-1 vom 2026-05-11
https://lists.suse.com/pipermail/sle-security-updates/2026-May/025971.html
SUSE Security Update SUSE-SU-2026:2121-1 vom 2026-05-29
https://lists.suse.com/pipermail/sle-security-updates/2026-May/026388.html
Debian Security Advisory DSA-6322 vom 2026-06-04
https://security-tracker.debian.org/tracker/DSA-6322-1