CVE-2024-34088: Frrouting

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service.

Affected products

• Frrouting Frrouting: up to and including 9.1

Published 2024-04-30. Last modified 2026-06-17.