Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

quagga quagga 0.97.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-1995
bgpd/bgp_attr.c in Quagga 0.98.6 and previous versions, and 0.99.6 and previous versions 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote malicious users to cause a denial of service (daemon crash or exit) via...
Quagga Quagga 0.98.0Quagga Quagga 0.98.1Quagga Quagga 0.97.3Quagga Quagga 0.97.4Quagga Quagga 0.96Quagga Quagga 0.95Quagga Quagga 0.98.4Quagga Quagga 0.97.0Quagga Quagga 0.96.4Quagga Quagga 0.96.2Quagga Quagga 0.98.2Quagga Quagga 0.98.3Quagga Quagga 0.97.5Quagga Quagga 0.96.5Quagga QuaggaQuagga Quagga 0.98.5Quagga Quagga 0.97.1Quagga Quagga 0.97.2Quagga Quagga 0.96.3Quagga Quagga 0.96.1
NA
CVE-2007-4826
bgpd in Quagga prior to 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.
Quagga Quagga 0.96.2Quagga Quagga 0.99.2Quagga Quagga 0.96.5Quagga Quagga 0.96.1Quagga Quagga 0.97.5Quagga Quagga 0.98.0Quagga Quagga 0.99.6Quagga Quagga 0.98.5Quagga Quagga 0.99.4Quagga Quagga 0.99.7Quagga Quagga 0.99.5Quagga Quagga 0.97.1Quagga Quagga 0.97.2Quagga Quagga 0.98.3Quagga Quagga 0.98.4Quagga QuaggaQuagga Quagga 0.99.3Quagga Quagga 0.95Quagga Quagga 0.96Quagga Quagga 0.97.0Quagga Quagga 0.98.1Quagga Quagga 0.98.2
NA
CVE-2009-1572
The BGP daemon (bgpd) in Quagga 0.99.11 and previous versions allows remote malicious users to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.
Quagga Quagga 0.96.3Quagga Quagga 0.96.2Quagga Quagga 0.99.9Quagga Quagga 0.96.4Quagga Quagga 0.97.3Quagga Quagga 0.97.4Quagga QuaggaQuagga Quagga 0.99.6Quagga Quagga 0.98.5Quagga Quagga 0.99.3Quagga Quagga 0.95Quagga Quagga 0.96Quagga Quagga 0.97.0Quagga Quagga 0.98.1Quagga Quagga 0.98.2Quagga Quagga 0.99.10Quagga Quagga 0.99.8Quagga Quagga 0.99.2Quagga Quagga 0.96.5Quagga Quagga 0.96.1Quagga Quagga 0.97.5Quagga Quagga 0.98.0
NA
CVE-2010-1674
The extended-community parser in bgpd in Quagga prior to 0.99.18 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
Quagga Quagga 0.99.6Quagga Quagga 0.98.5Quagga Quagga 0.99.8Quagga Quagga 0.99.2Quagga QuaggaQuagga Quagga 0.99.5Quagga Quagga 0.99.1Quagga Quagga 0.97.1Quagga Quagga 0.97.2Quagga Quagga 0.98.3Quagga Quagga 0.98.4Quagga Quagga 0.99.12Quagga Quagga 0.99.4Quagga Quagga 0.99.15Quagga Quagga 0.99.3Quagga Quagga 0.99.9Quagga Quagga 0.96.4Quagga Quagga 0.97.3Quagga Quagga 0.97.4Quagga Quagga 0.99.10Quagga Quagga 0.99.14Quagga Quagga 0.96.2
NA
CVE-2010-1675
bgpd in Quagga prior to 0.99.18 allows remote malicious users to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
Quagga Quagga 0.99.10Quagga Quagga 0.96.3Quagga Quagga 0.96.2Quagga Quagga 0.95Quagga Quagga 0.99.7Quagga Quagga 0.99.11Quagga Quagga 0.96.1Quagga Quagga 0.96Quagga Quagga 0.98.0Quagga Quagga 0.98.1Quagga Quagga 0.98.5Quagga Quagga 0.99.12Quagga Quagga 0.99.2Quagga Quagga 0.99.15Quagga Quagga 0.99.1Quagga Quagga 0.99.9Quagga Quagga 0.97.2Quagga Quagga 0.97.3Quagga Quagga 0.98.4Quagga Quagga 0.99.14Quagga Quagga 0.99.6Quagga Quagga 0.99.13
NA
CVE-2010-2948
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga prior to 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF)...
Quagga Quagga 0.99.11Quagga Quagga 0.99.2Quagga Quagga 0.97.5Quagga Quagga 0.95Quagga Quagga 0.98.3Quagga Quagga 0.96.3Quagga Quagga 0.99.4Quagga Quagga 0.99.7Quagga Quagga 0.99.14Quagga Quagga 0.99.5Quagga Quagga 0.96.5Quagga Quagga 0.98.0Quagga QuaggaQuagga Quagga 0.96.1Quagga Quagga 0.98.1Quagga Quagga 0.96.4Quagga Quagga 0.98.5Quagga Quagga 0.97.3Quagga Quagga 0.99.3Quagga Quagga 0.99.13Quagga Quagga 0.99.6Quagga Quagga 0.98.6
NA
CVE-2010-2949
bgpd in Quagga prior to 0.99.17 does not properly parse AS paths, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message.
Quagga Quagga 0.99.11Quagga Quagga 0.99.2Quagga Quagga 0.97.5Quagga Quagga 0.95Quagga Quagga 0.98.3Quagga Quagga 0.96.3Quagga Quagga 0.99.4Quagga Quagga 0.99.7Quagga Quagga 0.99.14Quagga Quagga 0.99.5Quagga Quagga 0.96.5Quagga Quagga 0.98.0Quagga QuaggaQuagga Quagga 0.96.1Quagga Quagga 0.98.1Quagga Quagga 0.96.4Quagga Quagga 0.98.5Quagga Quagga 0.97.3Quagga Quagga 0.99.3Quagga Quagga 0.99.13Quagga Quagga 0.99.6Quagga Quagga 0.98.6
NA
CVE-2012-0249
Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga prior to 0.99.20.1 allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet t...
Quagga Quagga 0.99.17Quagga Quagga 0.99.11Quagga Quagga 0.99.16Quagga Quagga 0.99.3Quagga Quagga 0.98.5Quagga Quagga 0.98.6Quagga Quagga 0.97.2Quagga Quagga 0.97.3Quagga Quagga 0.96.1Quagga Quagga 0.96Quagga Quagga 0.99.1Quagga Quagga 0.99.2Quagga Quagga 0.99.10Quagga Quagga 0.99.14Quagga Quagga 0.98.2Quagga Quagga 0.98.3Quagga Quagga 0.98.4Quagga Quagga 0.96.5Quagga Quagga 0.96.4Quagga Quagga 0.99.7Quagga Quagga 0.99.9Quagga Quagga 0.99.15
NA
CVE-2012-0255
The BGP implementation in bgpd in Quagga prior to 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number...
Quagga Quagga 0.99.9Quagga Quagga 0.99.1Quagga Quagga 0.99.6Quagga Quagga 0.99.10Quagga Quagga 0.99.14Quagga Quagga 0.98.2Quagga Quagga 0.98.3Quagga Quagga 0.97.5Quagga Quagga 0.96.5Quagga QuaggaQuagga Quagga 0.99.11Quagga Quagga 0.99.7Quagga Quagga 0.99.3Quagga Quagga 0.99.15Quagga Quagga 0.98.0Quagga Quagga 0.98.1Quagga Quagga 0.97.3Quagga Quagga 0.97.4Quagga Quagga 0.96Quagga Quagga 0.95Quagga Quagga 0.99.19Quagga Quagga 0.99.18
NA
CVE-2011-3323
The OSPFv3 implementation in ospf6d in Quagga prior to 0.99.19 allows remote malicious users to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.
Quagga Quagga 0.99.11Quagga Quagga 0.99.2Quagga Quagga 0.97.5Quagga Quagga 0.95Quagga Quagga 0.98.3Quagga Quagga 0.96.3Quagga Quagga 0.99.4Quagga Quagga 0.99.7Quagga Quagga 0.99.14Quagga Quagga 0.99.5Quagga Quagga 0.96.5Quagga Quagga 0.98.0Quagga Quagga 0.99.16Quagga Quagga 0.96.1Quagga Quagga 0.98.1Quagga Quagga 0.96.4Quagga Quagga 0.98.5Quagga Quagga 0.97.3Quagga Quagga 0.99.17Quagga Quagga 0.99.3Quagga Quagga 0.99.13Quagga Quagga 0.99.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook