FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions.
References
| Link | Resource |
|---|---|
| https://github.com/FRRouting/frr/issues/19471 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/FRRouting/frr/pull/19480 | Issue Tracking Third Party Advisory |
| https://github.com/FRRouting/frr/pull/19480/commits/cda5ddac0940562d1dca7cbef34d0ce5b00f160b | Patch |
| https://github.com/s1awwhy/BugList/blob/main/CVE-2025-61100.md | Third Party Advisory |
Configurations
History
03 Nov 2025, 18:02
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:* | |
| First Time |
Frrouting
Frrouting frrouting |
|
| References | () https://github.com/FRRouting/frr/issues/19471 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://github.com/FRRouting/frr/pull/19480 - Issue Tracking, Third Party Advisory | |
| References | () https://github.com/FRRouting/frr/pull/19480/commits/cda5ddac0940562d1dca7cbef34d0ce5b00f160b - Patch | |
| References | () https://github.com/s1awwhy/BugList/blob/main/CVE-2025-61100.md - Third Party Advisory |
Information
Published : 2025-10-27 19:16
Updated : 2025-11-03 18:02
NVD link : CVE-2025-61100
Mitre link : CVE-2025-61100
CVE.ORG link : CVE-2025-61100
JSON object : View
Products Affected
frrouting
- frrouting
CWE
CWE-476
NULL Pointer Dereference