What is CVE-2017-3224?

CVE-2017-3224 is a high-severity vulnerability in Open Shortest Path First (Ospf) Protocol, classified under Improper Validation of Integrity Check Value. CVSS score: 8.2/10. Published 2018-07-24.

How severe is CVE-2017-3224?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Open Shortest Path First (Ospf) Protocol

CVE-2017-3224

Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two instances of the same LSA, recency is det…

EPSS: 0.011 (61.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H.

Affected products

Open Shortest Path First (Ospf) Protocol — versions N/A
Quagga
Redhat Package_manager
Suse Opensuse
Suse Suse_linux

Weakness classification (CWE)

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2017-3224?: CVE-2017-3224 is a high-severity vulnerability in Open Shortest Path First (Ospf) Protocol, classified under Improper Validation of Integrity Check Value. CVSS score: 8.2/10. Published 2018-07-24.
How severe is CVE-2017-3224?: High severity. CVSS v3 base score is 8.2 out of 10.