Lucene search

K
cve[email protected]CVE-2013-2236
HistoryOct 24, 2013 - 3:48 a.m.

CVE-2013-2236

2013-10-2403:48:00
CWE-119
web.nvd.nist.gov
46
cve-2013-2236
stack-based buffer overflow
ospfd
quagga
denial of service
nvd
vulnerability

8.6 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.053 Low

EPSS

Percentile

93.0%

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

8.6 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.053 Low

EPSS

Percentile

93.0%