CVE-2025-61105 is a remotely exploitable vulnerability in FRRouting's OSPF implementation. It involves a NULL-pointer dereference in the show_vty_link_info path of ospf_ext.c, which can crash the ospfd process when a specially crafted OSPF packet is processed. This results in a denial of service (DoS) that impacts network operations. The vulnerability was disclosed in late October 2025 and is tracked under CVE-2025-61105. Discussions on WindowsForum cover the technical details, affected versions, and mitigation strategies for this issue, which is relevant to network administrators and security professionals managing FRRouting deployments.
-
FRRouting’s OSPF implementation contains a remotely triggerable NULL-pointer dereference in the show_vty_link_info path of ospf_ext.c that can crash the ospfd process and produce a network-impacting Denial of Service (DoS) when a specially crafted OSPF packet is processed—an issue tracked as...