FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet.
References
| Link | Resource |
|---|---|
| https://github.com/FRRouting/frr/issues/19471 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/FRRouting/frr/pull/19480 | Issue Tracking Third Party Advisory |
| https://github.com/FRRouting/frr/pull/19480/commits/fdd957408605d4a1766225630aafc7e6b7c3daf3 | Patch |
| https://github.com/s1awwhy/BugList/blob/main/CVE-2025-61107.md | Third Party Advisory |
Configurations
History
31 Oct 2025, 18:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/FRRouting/frr/issues/19471 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://github.com/FRRouting/frr/pull/19480 - Issue Tracking, Third Party Advisory | |
| References | () https://github.com/FRRouting/frr/pull/19480/commits/fdd957408605d4a1766225630aafc7e6b7c3daf3 - Patch | |
| References | () https://github.com/s1awwhy/BugList/blob/main/CVE-2025-61107.md - Third Party Advisory | |
| CPE | cpe:2.3:a:frrouting:frrouting:*:*:*:*:*:*:*:* | |
| First Time |
Frrouting frrouting
Frrouting |
28 Oct 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
28 Oct 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-28 15:16
Updated : 2025-10-31 18:46
NVD link : CVE-2025-61107
Mitre link : CVE-2025-61107
CVE.ORG link : CVE-2025-61107
JSON object : View
Products Affected
frrouting
- frrouting
CWE
CWE-476
NULL Pointer Dereference