CVE-2024-31949: Frrouting

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing.

Affected products

• Frrouting Frrouting: up to and including 9.1

Published 2024-04-07. Last modified 2026-06-17.