Denial of Service Vulnerability in FRRouting by FRR

CVE-2024-55553

What is CVE-2024-55553?

A vulnerability exists in FRRouting that could allow an attacker to exploit the system by sending a barrage of RPKI updates, triggering repeated revalidation of the Routing Information Base (RIB). This exploit can result in extended revalidation durations, potentially leading to a denial of service scenario where legitimate requests may be delayed or dropped, significantly affecting network performance and availability. Users of versions prior to 10.3 are advised to implement mitigations and update to secure versions to safeguard their systems.

References