CVE catalog

CVE-2025-61099

FRR vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.50% · Oct 25, 2026

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfrrsid10.7.1-6fixed
Debianfrrforky10.7.1-6fixed
Debianfrrtrixie10.3-3+deb13u1fixed
Debianfrrtrixie-security10.3-3+deb13u1fixed
Debianfrrbookworm8.4.4-1.1~deb12u2fixed
Debianfrrbookworm-security8.4.4-1.1~deb12u2fixed
Ubuntufrrnoble8.4.4-1.1~deb12u2fixed
Ubuntufrrnoble8.4.4-1.1ubuntu6.5fixed
Ubuntufrr-docnoble8.4.4-1.1ubuntu6.5fixed
Ubuntufrr-pythontoolsnoble8.4.4-1.1ubuntu6.5fixed
Ubuntufrr-rpki-rtrlibnoble8.4.4-1.1ubuntu6.5fixed
Ubuntufrr-snmpnoble8.4.4-1.1ubuntu6.5fixed
Ubuntuquaggapro1.1.1-3vulnerable
Ubuntuquaggapro1.1.1-3ubuntu1vulnerable
Ubuntuquaggapro1.2.2-1vulnerable
Ubuntuquaggapro1.2.2-1ubuntu1vulnerable
Ubuntuquaggapro1.2.4-1vulnerable
Ubuntuquaggapro1.2.4-1ubuntu0.1~esm1vulnerable
Ubuntuquaggapro1.2.4-1ubuntu0.1~esm2vulnerable
Ubuntuquagga20.041.2.4-4build1vulnerable
Ubuntuquagga20.041.2.4-4ubuntu0.1vulnerable
Ubuntuquagga20.041.2.4-4ubuntu0.4vulnerable
Ubuntuquagga20.041.2.4-4ubuntu0.5vulnerable
Ubuntufrrpro6.0.2-2build2vulnerable
Ubuntufrrpro7.2-1ubuntu1vulnerable
Ubuntufrrpro7.2-1ubuntu2vulnerable
Ubuntufrrpro7.2.1-1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm1vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm2vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm3vulnerable
Ubuntufrrpro7.2.1-1ubuntu0.2+esm4vulnerable
Ubuntufrr22.047.5.1-1.1vulnerable
Ubuntufrr22.048.1-1vulnerable
Ubuntufrr22.048.1-1ubuntu1vulnerable
Ubuntufrr22.048.1-1ubuntu1.1vulnerable
Ubuntufrr22.048.1-1ubuntu1.2vulnerable
Ubuntufrr22.048.1-1ubuntu1.3vulnerable
Ubuntufrr22.048.1-1ubuntu1.4vulnerable
Ubuntufrr22.048.1-1ubuntu1.5vulnerable
Ubuntufrr22.048.1-1ubuntu1.6vulnerable
Ubuntufrr22.048.1-1ubuntu1.7vulnerable
Ubuntufrr22.048.1-1ubuntu1.8vulnerable
Ubuntufrr22.048.1-1ubuntu1.9vulnerable
Ubuntufrr22.048.1-1ubuntu1.10vulnerable
Ubuntufrr22.048.1-1ubuntu1.11vulnerable
Ubuntufrr22.048.1-1ubuntu1.13vulnerable
Ubuntufrr22.048.1-1ubuntu1.14fixed
Ubuntufrr24.048.4.4-1.1ubuntu1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu5vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.2vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.5fixed
Ubuntufrr25.1010.2.1-1ubuntu3vulnerable
Ubuntufrr25.1010.3-3ubuntu2vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1.1fixed
Ubuntufrr26.0410.4.1-3ubuntu1vulnerable
Ubuntufrr26.0410.4.1-3ubuntu2vulnerable
Ubuntufrr26.0410.5.1-1ubuntu1vulnerable
Ubuntufrr26.0410.5.1-1ubuntu2fixed
Ubuntufrr22.047.5.1-1.1vulnerable
Ubuntufrr22.048.1-1vulnerable
Ubuntufrr22.048.1-1ubuntu1vulnerable
Ubuntufrr22.048.1-1ubuntu1.1vulnerable
Ubuntufrr22.048.1-1ubuntu1.2vulnerable
Ubuntufrr22.048.1-1ubuntu1.3vulnerable
Ubuntufrr22.048.1-1ubuntu1.4vulnerable
Ubuntufrr22.048.1-1ubuntu1.5vulnerable
Ubuntufrr22.048.1-1ubuntu1.6vulnerable
Ubuntufrr22.048.1-1ubuntu1.7vulnerable
Ubuntufrr22.048.1-1ubuntu1.8vulnerable
Ubuntufrr22.048.1-1ubuntu1.9vulnerable
Ubuntufrr22.048.1-1ubuntu1.10vulnerable
Ubuntufrr22.048.1-1ubuntu1.11vulnerable
Ubuntufrr22.048.1-1ubuntu1.13vulnerable
Ubuntufrr22.048.1-1ubuntu1.14fixed
Ubuntufrr24.048.4.4-1.1ubuntu1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu5vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.1vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.2vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.3vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.4vulnerable
Ubuntufrr24.048.4.4-1.1ubuntu6.5fixed
Ubuntufrr25.1010.2.1-1ubuntu3vulnerable
Ubuntufrr25.1010.3-3ubuntu2vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1vulnerable
Ubuntufrr25.1010.4.1-3ubuntu1.1fixed
Susefrrlinux enterprise server ltss extended security 12 sp58.5.6-8.9.1fixed
Susefrrlinux enterprise module for server applications 15 sp78.5.6-150500.4.36.1fixed
Opensusefrrleap 15.68.5.6-150500.4.36.1fixed
Opensusefrrtumbleweed10.2.1-4.1fixed
Susefrrlinux enterprise module for server applications 15 sp710.2.1-150700.3.5.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfrrsourcesid10.5.1-3not yet assignedNot reported[1119292]
Debianfrrsourceforky10.5.1-3not yet assignedNot reported[1119292]
Debianfrrsourcetrixie10.3-3+deb13u1not yet assignedNot reported[1119292]
Debianfrrsourcebookworm8.4.4-1.1~deb12u2not yet assignedNot reported[1119292]
Ubuntufrrdebnoble8.4.4-1.1~deb12u2Not reportedNot reportedNot reported
Ubuntufrrdebnoble8.4.4-1.1ubuntu6.5Not reportedNot reportedNot reported
Ubuntufrr-docdebnoble8.4.4-1.1ubuntu6.5Not reportedNot reportedNot reported
Ubuntufrr-pythontoolsdebnoble8.4.4-1.1ubuntu6.5Not reportedNot reportedNot reported
Ubuntufrr-rpki-rtrlibdebnoble8.4.4-1.1ubuntu6.5Not reportedNot reportedNot reported
Ubuntufrr-snmpdebnoble8.4.4-1.1ubuntu6.5Not reportedNot reportedNot reported
Ubuntufrrdeb22.048.1-1ubuntu1.14Not reportedUBUNTU-CVE-2025-61099Not reported
Ubuntufrrdeb24.048.4.4-1.1ubuntu6.5Not reportedUBUNTU-CVE-2025-61099Not reported
Ubuntufrrdeb25.1010.4.1-3ubuntu1.1Not reportedUBUNTU-CVE-2025-61099Not reported
Ubuntufrrdeb26.0410.5.1-1ubuntu2Not reportedUBUNTU-CVE-2025-61099Not reported
Ubuntufrrdeb22.048.1-1ubuntu1.14Not reportedUSN-8046-1Not reported
Ubuntufrrdeb24.048.4.4-1.1ubuntu6.5Not reportedUSN-8046-1Not reported
Ubuntufrrdeb25.1010.4.1-3ubuntu1.1Not reportedUSN-8046-1Not reported
Susefrrrpmlinux enterprise server ltss extended security 12 sp58.5.6-8.9.1Not reportedSUSE-SU-2026:1057-1Not reported
Susefrrrpmlinux enterprise module for server applications 15 sp78.5.6-150500.4.36.1Not reportedSUSE-SU-2026:1063-1Not reported
Opensusefrrrpmleap 15.68.5.6-150500.4.36.1Not reportedSUSE-SU-2026:1063-1Not reported
Opensusefrrrpmtumbleweed10.2.1-4.1Not reportedOPENSUSE-SU-2026:10207-1Not reported
Susefrrrpmlinux enterprise module for server applications 15 sp710.2.1-150700.3.5.1Not reportedSUSE-SU-2026:0665-1Not reported

[Debian bug #1119292]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [frr-devel]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libfrr0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libfrrcares0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libfrrfpm_pb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libfrrospfapiclient0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libfrr_pb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libfrrsnmp0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libfrrzmq0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libmgmt_be_nb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

  • [libmlag_pb0]Unknown

    Source package: [frr]

    Details (1)

    • 10.6.1-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.2.1-4.1

      Version impact unknown

      usn · frr · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [frr]Fixed
    Details (4)

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

  • [frr-doc]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

  • [frr-pythontools]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

  • [frr-rpki-rtrlib]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

  • [frr-snmp]Fixed

    Source package: [frr]

    Details (4)

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

    • 8.4.4-1.1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 8.4.4-1.1~deb12u2

      usn · frr · debian · bookworm; usn · frr · debian · 12

[Debian 13 (Trixie)]

  • [frr]Fixed
    Details (4)

    • 10.3-3+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

  • [frr-doc]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

  • [frr-pythontools]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

  • [frr-rpki-rtrlib]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

  • [frr-snmp]Fixed

    Source package: [frr]

    Details (4)

    • 10.3-3+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

    • 10.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.3-3+deb13u1

      usn · frr · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]