A critical Denial of Service vulnerability in FRRouting allows unauthenticated remote attackers to crash the service by sending a malicious OSPF packet.

The flaw is a NULL pointer dereference occurring within the show_vty_link_info function. An unauthenticated attacker can trigger this condition by transmitting a specifically crafted OSPF packet to the target system.

Successful exploitation of this vulnerability results in a Denial of Service, which can disrupt critical routing operations and network connectivity. Given the CVSS score of 7.5, the risk is considered high due to the lack of authentication required to trigger the crash, potentially allowing for widespread network instability.

Immediate Action: Monitor the official FRRouting repository for the release of a patched version and apply the update immediately upon availability.

Proactive Monitoring: Monitor network infrastructure logs for unusual OSPF traffic patterns or unexpected service restarts that may indicate attempted exploitation.

Compensating Controls: Implement strict network ingress filtering to restrict OSPF traffic to trusted peers only, thereby reducing the attack surface for external actors.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the research write-up referenced in the CVE record.

This vulnerability presents a significant risk to network availability due to the ease of triggering a crash via standard network protocols. Organizations relying on FRRouting should prioritize the application of security patches as soon as the vendor provides them. In the interim, ensure that OSPF communication is strictly limited to authorized network segments to prevent exploitation from untrusted sources.