Vulnerability Description
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Frrouting | Frrouting | >= 2.0, <= 10.4.1 |
Related Weaknesses (CWE)
References
- https://github.com/FRRouting/frr/issues/19471ExploitIssue TrackingThird Party Advisory
- https://github.com/FRRouting/frr/pull/19480Issue TrackingThird Party Advisory
- https://github.com/FRRouting/frr/pull/19480/commits/cda5ddac0940562d1dca7cbef34dPatch
- https://github.com/s1awwhy/BugList/blob/main/CVE-2025-61100.mdThird Party Advisory
FAQ
What is CVE-2025-61100?
CVE-2025-61100 is a vulnerability with a CVSS score of 7.5 (HIGH). FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Deni...
How severe is CVE-2025-61100?
CVE-2025-61100 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-61100?
Check the references section above for vendor advisories and patch information. Affected products include: Frrouting Frrouting.