CNNVD-202510-3807 Information

CNNVD ID

CNNVD-202510-3807

CVE-2025-61104

  • CNNVD Published: 2025-10-28

Description (Chinese)

FRRouting是FRRouting开源的一种在类 Unix 平台上运行的网络路由软件套件。 FRRouting 4.0版本至10.4.1版本存在安全漏洞,该漏洞源于show_vty_unknown_tlv函数存在空指针取消引用,可能导致拒绝服务攻击。

Description (English)

FRRouting is a network router package run by FRRRouting open source on the Onex platform. There is a security loophole between FRRouting Versions 4.0 and 10.4.1, which stems from the empty pointer decitation of the show vty unknown tlv function, which may lead to a denial of service attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

FRRouting

Published

2025-10-28

Last Modified

2026-02-24

References

https://github.com/FRRouting/frr/issues/19471 https://github.com/FRRouting/frr/pull/19480 https://github.com/FRRouting/frr/pull/19480/commits/fdd957408605d4a1766225630aafc7e6b7c3daf3 https://github.com/s1awwhy/BugList/blob/main/CVE-2025-61104.md

Share on: