In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Frrouting | Frrouting | * | 9.1 (including) |
| Frr | Ubuntu | devel | * |
| Frr | Ubuntu | jammy | * |
| Frr | Ubuntu | mantic | * |
| Frr | Ubuntu | noble | * |