Ecosystem	Package	Version

Vulnerabilities

CVE-2025-61103

CVE-2025-61103

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Published Oct 31, 2025

https://github.com/CVEProject/cvelistV5/blob/main/cves/2025/61xxx/CVE-2025-61103.json

CVSS ScoreHigh

7.5

Ecosystem	Package	Version


rpm	frr	10.1-10.el10
rpm	frr	10.1-3.el10
rpm	frr	7.0-10.el8
rpm	frr	7.0-5.el8
rpm	frr	7.5-11.el8
rpm	frr	7.5-4.el8
rpm	frr	7.5-4.el8_5.2
rpm	frr	7.5.1-13.0.1.el8_9.3
rpm	frr	7.5.1-13.0.1.el8_9.4
rpm	frr	7.5.1-13.el8_9.3
rpm	frr	7.5.1-13.el8_9
rpm	frr	7.5.1-22.0.1.el8
rpm	frr	7.5.1-4.0.1.el8
rpm	frr	7.5.1-7.0.1.el8
rpm	frr	7.5.1-7.0.1.el8_8.2
rpm	frr	8.0-5.el9
rpm	frr	8.2.2-4.el9
rpm	frr	8.3.1-11.el9_3.1
rpm	frr	8.3.1-11.el9_3.2
rpm	frr	8.3.1-11.el9_3
rpm	frr	8.3.1-5.el9
rpm	frr	8.3.1-5.el9_2.1
rpm	frr	8.3.1-5.el9_2.2
rpm	frr	8.5.3-4.el9
rpm	frr	8.5.3-4.el9_5.1
rpm	frr	8.5.3-9.el9_6.1
rpm	frr	8.5.3-9.el9_6
rpm	frr-selinux	10.1-10.el10
rpm	frr-selinux	10.1-3.el10
rpm	frr-selinux	7.5.1-13.0.1.el8_9.3
rpm	frr-selinux	7.5.1-13.0.1.el8_9.4
rpm	frr-selinux	7.5.1-13.el8_9.3
rpm	frr-selinux	7.5.1-13.el8_9
rpm	frr-selinux	7.5.1-22.0.1.el8
rpm	frr-selinux	7.5.1-4.0.1.el8
rpm	frr-selinux	7.5.1-7.0.1.el8
rpm	frr-selinux	7.5.1-7.0.1.el8_8.2
rpm	frr-selinux	8.3.1-11.el9_3.1
rpm	frr-selinux	8.3.1-11.el9_3.2
rpm	frr-selinux	8.3.1-11.el9_3
rpm	frr-selinux	8.3.1-5.el9
rpm	frr-selinux	8.3.1-5.el9_2.1
rpm	frr-selinux	8.3.1-5.el9_2.2
rpm	frr-selinux	8.5.3-4.el9
rpm	frr-selinux	8.5.3-4.el9_5.1
rpm	frr-selinux	8.5.3-9.el9_6.1
rpm	frr-selinux	8.5.3-9.el9_6

CVE-2025-61103 | Components Impacted | Sonatype Guide | Sonatype Guide