CVE-2012-0249
Fixed in a distro release EPSS 2%
Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.
Products: quagga
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | quagga | 0.99.20.1-0+squeeze1 |
| Red Hat Enterprise Linux 5 | quagga | 0:0.98.6-7.el5_8.1 |
| Red Hat Enterprise Linux 5 | quagga-contrib | 0:0.98.6-7.el5_8.1 |
| Red Hat Enterprise Linux 5 | quagga-debuginfo | 0:0.98.6-7.el5_8.1 |
| Red Hat Enterprise Linux 5 | quagga-devel | 0:0.98.6-7.el5_8.1 |
| Red Hat Enterprise Linux 6 | quagga | 0:0.99.15-7.el6_3.2 |
| Red Hat Enterprise Linux 6 | quagga-contrib | 0:0.99.15-7.el6_3.2 |
| Red Hat Enterprise Linux 6 | quagga-debuginfo | 0:0.99.15-7.el6_3.2 |
| Red Hat Enterprise Linux 6 | quagga-devel | 0:0.99.15-7.el6_3.2 |