CVE-2024-55553 – FRR RPKI Update Flooding Remote Denial of Service

The following table lists the changes that have been made to the
CVE-2024-55553 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jan. 06, 2025

    Action Type Old Value New Value
    Added Description In FRRouting (FRR) before 10.3, it is possible for an attacker to trigger repeated RIB revalidation by sending approximately 500 RPKI updates, potentially leading to prolonged revalidation times and a Denial of Service (DoS) scenario.
    Added Reference https://frrouting.org/security/cve-2024-55553/
    Added Reference https://github.com/FRRouting/frr/pull/17586/commits/b0800bfdf04b4fcf48504737ebfe4ba7f05268d3
Share the Post:

Related Posts