Lucene search
OracleLinuxELSA-2017-0794HistoryMar 27, 2017 - 12:00 a.m.
quagga security and bug fix update
2017-03-2700:00:00
linux.oracle.com
28
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.286 Low
EPSS
Percentile
96.4%
[0.99.15-14]
- Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory
[0.99.15-13] - fix path of ripd pid file (#842308)
[0.99.15-12] - fix start() function in watchqugga initscript (#862826, #1208617)
[0.99.15-11] - fix for CVE-2013-2236 (#1391918)
- fix for CVE-2016-1245 (#1391914)
- fix for CVE-2016-2342 (#1391916)
- fix for CVE-2016-4049 (#1391919)
[0.99.15-11] - ospf6d: Fix crash when ‘[no] ipv6 ospf6 advertise prefix-list’ is in startup-config (#770731)
[0.99.15-10] - add watchquagga initscript (#862826, #1208617)
- remove pidfile when service is stopped (#842308)
- use QCONFDIR correctly in initscripts (#839620)
- include watchquagga and ospfclient manpages (#674862)
[0.99.15-9] - improve fix for CVE-2011-3325
[0.99.15-8] - fix CVE-2011-3323
- fix CVE-2011-3324
- fix CVE-2011-3325
- fix CVE-2011-3326
- fix CVE-2011-3327
- fix CVE-2012-0255
- fix CVE-2012-0249 and CVE-2012-0250
- fix CVE-2012-1820
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 6 | src | quagga | <Â 0.99.15-14.el6 | quagga-0.99.15-14.el6.src.rpm |
| oracle linux | 6 | i686 | quagga | <Â 0.99.15-14.el6 | quagga-0.99.15-14.el6.i686.rpm |
| oracle linux | 6 | i686 | quagga-contrib | <Â 0.99.15-14.el6 | quagga-contrib-0.99.15-14.el6.i686.rpm |
| oracle linux | 6 | i686 | quagga-devel | <Â 0.99.15-14.el6 | quagga-devel-0.99.15-14.el6.i686.rpm |
| oracle linux | 6 | src | quagga | <Â 0.99.15-14.el6 | quagga-0.99.15-14.el6.src.rpm |
| oracle linux | 6 | x86_64 | quagga | <Â 0.99.15-14.el6 | quagga-0.99.15-14.el6.x86_64.rpm |
| oracle linux | 6 | x86_64 | quagga-contrib | <Â 0.99.15-14.el6 | quagga-contrib-0.99.15-14.el6.x86_64.rpm |
| oracle linux | 6 | i686 | quagga-devel | <Â 0.99.15-14.el6 | quagga-devel-0.99.15-14.el6.i686.rpm |
| oracle linux | 6 | x86_64 | quagga-devel | <Â 0.99.15-14.el6 | quagga-devel-0.99.15-14.el6.x86_64.rpm |
Related
openvas
openvas
CentOS Update for quagga CESA-2012:1259 centos6
2012-09-17 00:00:00
RedHat Update for quagga RHSA-2012:1259-01
2012-09-17 00:00:00
Oracle Linux Local Check: ELSA-2012-1259
2015-10-06 00:00:00
securityvulns
securityvulns
quagga route daemon multiple security vulnerabilities
2011-10-10 00:00:00
[SECURITY] [DSA 2316-1] quagga security update
2011-10-10 00:00:00
centos
centos
quagga security update
2012-09-12 23:23:05
quagga security update
2012-09-12 21:45:33
quagga security update
2017-03-24 15:42:29
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:43:12
Denial Of Service (DoS)
2019-05-02 04:43:10
Denial Of Service (DoS)
2019-05-02 04:43:12
nessus
nessus
Scientific Linux Security Update : quagga on SL6.x i386/x86_64 (20120912)
2012-09-14 00:00:00
Oracle Linux 6 : quagga (ELSA-2012-1259)
2013-07-12 00:00:00
CentOS 6 : quagga (CESA-2012:1259)
2012-09-14 00:00:00
redhat
redhat
(RHSA-2012:1259) Moderate: quagga security update
2012-09-12 00:00:00
(RHSA-2012:1258) Moderate: quagga security update
2012-09-12 00:00:00
(RHSA-2017:0794) Moderate: quagga security and bug fix update
2017-03-21 06:17:51
fedora
fedora
[SECURITY] Fedora 15 Update: quagga-0.99.20.1-1.fc15
2012-04-22 03:48:42
[SECURITY] Fedora 16 Update: quagga-0.99.20-2.fc16
2011-10-19 04:40:08
[SECURITY] Fedora 15 Update: quagga-0.99.20-2.fc15
2011-10-18 22:20:24
osv
osv
quagga - several
2011-10-05 00:00:00
quagga - regression
2012-05-04 00:00:00
quagga - several
2012-05-04 00:00:00
ubuntu
ubuntu
Quagga vulnerabilities
2011-11-14 00:00:00
Quagga vulnerabilities
2012-05-15 00:00:00
Quagga vulnerabilities
2016-03-24 00:00:00
suse
suse
Security update for quagga (important)
2011-09-28 22:08:22
Security update for quagga (important)
2011-10-24 17:08:25
quagga: fixing multiple vulnerabilities (important)
2011-10-18 19:08:25
debian
debian
[SECURITY] [DSA 2316-1] quagga security update
2011-10-05 18:57:11
[SECURITY] [DSA 2459-1] quagga security update
2012-04-26 05:56:28
cert
cert
Multiple Quagga remote component vulnerabilities
2011-09-26 00:00:00
Quagga contains multiple vulnerabilities
2012-03-23 00:00:00
Quagga BGP OPEN denial of service vulnerability
2012-06-04 00:00:00
gentoo
gentoo
Quagga: Multiple vulnerabilities
2013-10-10 00:00:00
Quagga: Multiple vulnerabilities
2012-02-21 00:00:00
Quagga: Multiple vulnerabilities
2017-01-21 00:00:00
freebsd
freebsd
quagga -- multiple vulnerabilities
2011-09-26 00:00:00
quagga -- multiple vulnerabilities
2012-03-23 00:00:00
quagga -- BGP OPEN denial of service vulnerability
2012-06-04 00:00:00
oraclelinux
oraclelinux
quagga security update
2012-09-12 00:00:00
quagga security update
2012-09-12 00:00:00
prion
prion
Stack overflow
2013-10-24 03:48:00
Out-of-bounds
2011-10-10 10:55:00
Design/Logic Flaw
2012-06-13 15:55:00
ubuntucve
ubuntucve
mageia
mageia
Updated quagga packages fix CVE-2013-2236
2013-10-17 23:40:12
Updated quagga packages fix security vulnerability
2017-03-03 13:09:43
checkpoint_advisories
checkpoint_advisories
Quagga VTY Interface Denial of Service (CVE-2017-5495)
2017-04-03 00:00:00
cve
cve
debiancve
debiancve
amazon
amazon
Low: quagga
2012-06-19 16:01:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.286 Low
EPSS
Percentile
96.4%
Related for ELSA-2017-0794