A critical vulnerability in the FRRouting (frr) networking suite allows unauthenticated attackers to crash services and cause a Denial of Service via malicious LSA Update packets.

The software contains a NULL pointer dereference flaw in the show_vty_ext_pref_pref_sid function within ospf_ext.c. This issue can be triggered by an unauthenticated remote attacker through a specially crafted Link State Advertisement (LSA) Update packet, leading to an application crash.

The exploitation of this vulnerability results in a Denial of Service, which effectively disrupts routing capabilities for infrastructure relying on FRRouting. Given the CVSS score of 7.5, this high severity flaw poses a significant risk to network availability, potentially leading to widespread connectivity loss and administrative overhead for recovery.

Immediate Action: Administrators should monitor the vendor GitHub repository for the official release containing the fix found in commit 88f5c06cbc1cc4d62e1cba3e7791f5cea4179ba5 and update the software immediately upon availability.

Proactive Monitoring: Security teams should review OSPF traffic logs for malformed LSA packets and monitor system logs for frequent restarts or crashes of the FRRouting daemon.

Compensating Controls: Implement network-level filtering to restrict OSPF packet traffic to known, trusted peers, which effectively blocks unauthenticated attackers from reaching the vulnerable function.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the security researcher's analysis referenced in the CVE record.

Due to the ease of exploitability and the potential for significant network disruption, organizations utilizing FRRouting must prioritize this update. Until a patch is deployed, ensure that OSPF interfaces are appropriately firewalled to prevent unauthorized packet injection from untrusted sources.