CVE-2013-5385

The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System aka NOS, formerly BLADE Operating System does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database, which allows remote...

quagga security vulnerabilities

OSPF parsing buffer overflow, BGP DoS...

[SECURITY] [DSA 2803-1] quagga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2803-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

Juniper Networks Junos OS OSPF Protocol Vulnerability

A vulnerability in the OSPF protocol allows a remote attacker to insert, update or delete routes in the OSPF database. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian DSA-2803-1 : quagga - several vulnerabilities

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon : - CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. - CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects...

[SECURITY] [DSA 2803-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2803-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2803-1 (quagga - several vulnerabilities)

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon: CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects Wheezy/stable...

DSA-2803-1 quagga - several

Bulletin has no description...

Quagga < 0.99.22.2 OSPF API Buffer Overflow

According to its self-reported version number, the installation of Quagga listening on the remote host is potentially affected by a stack-based buffer overflow that occurs in the OSPF API server 'ospfapi.c' when it receives an LSA larger than 1488 bytes. The vulnerability is only present when...

Stack overflow

Stack-based buffer overflow in the newmsglsachangenotify function in the OSPFD API ospfapi.c in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service crash via a large LSA...

Updated quagga packages fix CVE-2013-2236

Updated quagga packages fix security vulnerability: Remotely exploitable buffer overflow in ospfapi.c and ospfclient.c when processing LSA messages in quagga before 0.99.22.2 CVE-2013-2236. Note: We have worked around this vulnerability by disabling the ospfapi and ospfclient features, which did...

MGASA-2013-0310 Updated quagga packages fix CVE-2013-2236

Updated quagga packages fix security vulnerability: Remotely exploitable buffer overflow in ospfapi.c and ospfclient.c when processing LSA messages in quagga before 0.99.22.2 CVE-2013-2236. Note: We have worked around this vulnerability by disabling the ospfapi and ospfclient features, which did...

Cisco IOS Software OSPF Opaque LSA Denial of Service Vulnerability

A vulnerability in the OSPF implementation of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to improper parsing of certain options in OSPF link-state advertisement LSA type 11...

CVE-2013-5527

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

Design/Logic Flaw

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

CVE-2013-5527

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

CVE-2013-5527

The vulnerability CVE-2013-5527 affects Cisco IOS and IOS XE OSPF implementations, specifically the OSPF opaque LSA (type 11) handling. The root cause is improper parsing of certain options in OSPF LSA type 11 packets, which can be exploited remotely by an unauthenticated attacker to trigger a de...

SuSE 11.2 / 11.3 Security Update : quagga (SAT Patch Numbers 8234 / 8235)

This update of quagga fixes two security issues : - specially crafted OSPF packets could have caused the routing table to be erased. bnc822572. CVE-2013-0149 - local network stack overflow bnc828117. CVE-2013-2236 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Check Point response to OSPF LSA spoofing vulnerability (CVE-2013-0149, CVE-2013-7311)

...

OSPF LSA Manipulation Vulnerability in Cisco IOS XE (cisco-sa-20130801-lsaospf)

The remote Cisco IOS XE device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. A remote, unauthenticated attacker can exploit this vulnerability, via specially crafted OSPF packets, to manipulate or disrupt the flo...