Published: 05/04/2012 Updated: 18/01/2018

CVSS v2 Base Score: 3.3 | Impact Score: 2.9 | Exploitability Score: 6.5

VMScore: 294

Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga prior to 0.99.20.1 allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga 0.99.17
quagga quagga 0.99.11
quagga quagga 0.99.16
quagga quagga 0.99.3
quagga quagga 0.98.5
quagga quagga 0.98.6
quagga quagga 0.97.2
quagga quagga 0.97.3
quagga quagga 0.96.1
quagga quagga 0.96
quagga quagga 0.99.1
quagga quagga 0.99.2
quagga quagga 0.99.10
quagga quagga 0.99.14
quagga quagga 0.98.2
quagga quagga 0.98.3
quagga quagga 0.98.4
quagga quagga 0.96.5
quagga quagga 0.96.4
quagga quagga 0.99.7
quagga quagga 0.99.9
quagga quagga 0.99.15
quagga quagga 0.99.6
quagga quagga 0.98.0
quagga quagga 0.98.1
quagga quagga 0.97.4
quagga quagga 0.97.5
quagga quagga 0.95
quagga quagga
quagga quagga 0.99.19
quagga quagga 0.99.18
quagga quagga 0.99.5
quagga quagga 0.99.8
quagga quagga 0.99.13
quagga quagga 0.99.12
quagga quagga 0.99.4
quagga quagga 0.97.0
quagga quagga 0.97.1
quagga quagga 0.96.2
quagga quagga 0.96.3

Quagga could be made to crash if it received specially crafted network traffic ...

Synopsis Moderate: quagga security update Type/Severity Security Advisory: Moderate Topic Updated quagga packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability ...

Synopsis Moderate: quagga security update Type/Severity Security Advisory: Moderate Topic Updated quagga packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability ...

Several vulnerabilities have been discovered in Quagga, a routing daemon CVE-2012-0249 A buffer overflow in the ospf_ls_upd_list_lsa function in the OSPFv2 implementation allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than ...

CWE-119 http://www.kb.cert.org/vuls/id/551715 https://bugzilla.quagga.net/show_bug.cgi?id=705 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html http://rhn.redhat.com/errata/RHSA-2012-1258.html http://rhn.redhat.com/errata/RHSA-2012-1259.html http://secunia.com/advisories/48949 http://www.debian.org/security/2012/dsa-2459 https://usn.ubuntu.com/1441-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/551715

CVE-2012-0249

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect