Ecosystem	Package	Version

Vulnerabilities

CVE-2025-61100

CVE-2025-61100

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions.

Published Oct 28, 2025

https://github.com/FRRouting/frr/issues/19471

CVSS ScoreHigh

8.7

Ecosystem	Package	Version


rpm	frr	10.1-10.el10
rpm	frr	10.1-3.el10
rpm	frr	7.0-10.el8
rpm	frr	7.0-5.el8
rpm	frr	7.5-11.el8
rpm	frr	7.5-4.el8
rpm	frr	7.5-4.el8_5.2
rpm	frr	7.5.1-13.0.1.el8_9.3
rpm	frr	7.5.1-13.0.1.el8_9.4
rpm	frr	7.5.1-13.el8_9.3
rpm	frr	7.5.1-13.el8_9
rpm	frr	7.5.1-22.0.1.el8
rpm	frr	7.5.1-4.0.1.el8
rpm	frr	7.5.1-7.0.1.el8
rpm	frr	7.5.1-7.0.1.el8_8.2
rpm	frr	8.0-5.el9
rpm	frr	8.2.2-4.el9
rpm	frr	8.3.1-11.el9_3.1
rpm	frr	8.3.1-11.el9_3.2
rpm	frr	8.3.1-11.el9_3
rpm	frr	8.3.1-5.el9
rpm	frr	8.3.1-5.el9_2.1
rpm	frr	8.3.1-5.el9_2.2
rpm	frr	8.5.3-4.el9
rpm	frr	8.5.3-4.el9_5.1
rpm	frr	8.5.3-9.el9_6.1
rpm	frr	8.5.3-9.el9_6
rpm	frr-selinux	10.1-10.el10
rpm	frr-selinux	10.1-3.el10
rpm	frr-selinux	7.5.1-13.0.1.el8_9.3
rpm	frr-selinux	7.5.1-13.0.1.el8_9.4
rpm	frr-selinux	7.5.1-13.el8_9.3
rpm	frr-selinux	7.5.1-13.el8_9
rpm	frr-selinux	7.5.1-22.0.1.el8
rpm	frr-selinux	7.5.1-4.0.1.el8
rpm	frr-selinux	7.5.1-7.0.1.el8
rpm	frr-selinux	7.5.1-7.0.1.el8_8.2
rpm	frr-selinux	8.3.1-11.el9_3.1
rpm	frr-selinux	8.3.1-11.el9_3.2
rpm	frr-selinux	8.3.1-11.el9_3
rpm	frr-selinux	8.3.1-5.el9
rpm	frr-selinux	8.3.1-5.el9_2.1
rpm	frr-selinux	8.3.1-5.el9_2.2
rpm	frr-selinux	8.5.3-4.el9
rpm	frr-selinux	8.5.3-4.el9_5.1
rpm	frr-selinux	8.5.3-9.el9_6.1
rpm	frr-selinux	8.5.3-9.el9_6

CVE-2025-61100 | Components Impacted | Sonatype Guide | Sonatype Guide