(ospfd): Denial of service by decoding Link State Update LSAs of unknown type

The ospfflood function in ospfflood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash via an invalid Link State Advertisement LSA type in an IPv4 Link State Update message...

Ubuntu Update for quagga USN-1441-1

Ubuntu Update for Linux kernel vulnerabilities USN-1441-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14411.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for quagga USN-1441-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

AZL-44544 CVE-2012-0249 affecting package quagga 1.2.4-16

Buffer overflow in the ospflsupdlistlsa function in ospfpacket.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a Link State Update aka LS Update packet that is smaller than the length...

CVE-2012-0250

Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service daemon crash via a Link State Update aka LS Update packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 5219 / 5222 / 5223)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.46 and fixes various bugs and security issues. The following security issues have been fixed : - A signedness issue in CIFS could possibly have lead to to memory corruption, if a malicious server could send crafted replies t...

SuSE 11.1 Security Update : quagga (SAT Patch Number 5169)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa. CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet. CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet. CVE-2011-33...

quagga: fixing multiple vulnerabilities (important)

This update fixes the following security issues: - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet CVE-2011-3325 -...

CVE-2011-3326

The ospfflood function in ospfflood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash via an invalid Link State Advertisement LSA type in an IPv4 Link State Update message...

CVE-2011-3323

CVE-2011-3323 affects Quagga’s OSPFv3 implementation (ospf6d) before 0.99.19. A Link State Update with an invalid IPv6 prefix length can cause out-of-bounds memory access and a daemon crash (DoS). Remediation per the connected docs is upgrade to Quagga 0.99.19 or newer; exploitation details are n...

CVE-2011-3326

Removed by vendor...

Debian DSA-2316-1 : quagga - several vulnerabilities

Riku Hietamaki, Tuomo Untinen and Jukka Taimisto discovered several vulnerabilities in Quagga, an Internet routing daemon : - CVE-2011-3323 A stack-based buffer overflow while decoding Link State Update packets with a malformed Inter Area Prefix LSA can cause the ospf6d process to crash or...

OSPF Agent Detection

The remote host is running an OSPF Open Shortest Path First agent. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only RFC 1247 / RFC 2328 OSPF v2...