Published: 05/04/2012 Updated: 18/01/2018

CVSS v2 Base Score: 3.3 | Impact Score: 2.9 | Exploitability Score: 6.5

VMScore: 294

Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Buffer overflow in the OSPFv2 implementation in ospfd in Quagga prior to 0.99.20.1 allows remote malicious users to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga
quagga quagga 0.99.13
quagga quagga 0.99.12
quagga quagga 0.99.15
quagga quagga 0.99.14
quagga quagga 0.99.7
quagga quagga 0.99.6
quagga quagga 0.99.5
quagga quagga 0.99.4
quagga quagga 0.99.19
quagga quagga 0.99.18
quagga quagga 0.99.11
quagga quagga 0.99.10
quagga quagga 0.99.3
quagga quagga 0.99.2
quagga quagga 0.99.17
quagga quagga 0.99.16
quagga quagga 0.99.9
quagga quagga 0.99.8
quagga quagga 0.99.1

Quagga could be made to crash if it received specially crafted network traffic ...

Synopsis Moderate: quagga security update Type/Severity Security Advisory: Moderate Topic Updated quagga packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability ...

Synopsis Moderate: quagga security update Type/Severity Security Advisory: Moderate Topic Updated quagga packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability ...

Several vulnerabilities have been discovered in Quagga, a routing daemon CVE-2012-0249 A buffer overflow in the ospf_ls_upd_list_lsa function in the OSPFv2 implementation allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than ...

Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 099201 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field ...

CWE-119 http://www.kb.cert.org/vuls/id/551715 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html http://rhn.redhat.com/errata/RHSA-2012-1258.html http://rhn.redhat.com/errata/RHSA-2012-1259.html http://secunia.com/advisories/48949 http://www.debian.org/security/2012/dsa-2459 https://usn.ubuntu.com/1441-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/551715

CVE-2012-0250

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect