Low Privileged Remote Attacker Can Perform Configuration Changes Leading to DoS via OSPF_INTERFACE.SIMPLE_KEY and OSPF_INTERFACE.DIGEST_KEY

CVE-2024-43389

Summary

A vulnerability allows low privileged remote attackers to make unauthorized configuration changes to the OSPF service. By manipulating OSPF_INTERFACE.SIMPLE_KEY and OSPF_INTERFACE.DIGEST_KEY environment variables, attackers can disrupt the service, potentially leading to a Denial of Service (DoS) condition. This vulnerability poses significant risks for network stability and requires urgent attention to prevent exploitation.

References