A NULL pointer dereference vulnerability in FRRouting allows remote, unauthenticated attackers to cause a Denial of Service through crafted OSPF packets.

This vulnerability involves a NULL pointer dereference within the show_vty_ext_link_adj_sid function located in ospf_ext.c. An unauthenticated attacker can exploit this by sending a specially crafted OSPF packet to the target system, resulting in a service crash.

The successful exploitation of this vulnerability results in a Denial of Service, which can disrupt critical routing operations and network connectivity. With a CVSS score of 7.5, this high-severity flaw poses a significant risk to network availability, particularly for infrastructure relying on OSPF for traffic management.

Immediate Action: Review the FRRouting project repository for official patch releases and apply updates to version 10.4.2 or later as soon as they are made available.

Proactive Monitoring: Monitor OSPF process logs and system stability metrics for unexpected service restarts or crashes, which may indicate exploitation attempts.

Compensating Controls: Implement OSPF packet filtering or strict access control lists at the network perimeter to restrict OSPF traffic to trusted peers only, thereby reducing the attack surface.

Public Exploit Available: Yes, a published PoC exists, attributed to the research write-up referenced in the CVE record.

Given the potential for complete service disruption and the availability of technical details regarding the exploit, organizations utilizing FRRouting should prioritize this vulnerability. Administrators must monitor the vendor repository for the official patch and prepare for immediate deployment to ensure network resilience against potential DoS attacks.