Debian Security Advisory DSA 2803-1 (quagga - several vulnerabilities)

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon: CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects Wheezy/stable...

DSA-2803-1 quagga - several

Bulletin has no description...

Quagga < 0.99.22.2 OSPF API Buffer Overflow

According to its self-reported version number, the installation of Quagga listening on the remote host is potentially affected by a stack-based buffer overflow that occurs in the OSPF API server 'ospfapi.c' when it receives an LSA larger than 1488 bytes. The vulnerability is only present when...

Stack overflow

Stack-based buffer overflow in the newmsglsachangenotify function in the OSPFD API ospfapi.c in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service crash via a large LSA...

MGASA-2013-0310 Updated quagga packages fix CVE-2013-2236

Updated quagga packages fix security vulnerability: Remotely exploitable buffer overflow in ospfapi.c and ospfclient.c when processing LSA messages in quagga before 0.99.22.2 CVE-2013-2236. Note: We have worked around this vulnerability by disabling the ospfapi and ospfclient features, which did...

Updated quagga packages fix CVE-2013-2236

Updated quagga packages fix security vulnerability: Remotely exploitable buffer overflow in ospfapi.c and ospfclient.c when processing LSA messages in quagga before 0.99.22.2 CVE-2013-2236. Note: We have worked around this vulnerability by disabling the ospfapi and ospfclient features, which did...

Cisco IOS Software OSPF Opaque LSA Denial of Service Vulnerability

A vulnerability in the OSPF implementation of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to improper parsing of certain options in OSPF link-state advertisement LSA type 11...

CVE-2013-5527

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

Design/Logic Flaw

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

CVE-2013-5527

The vulnerability CVE-2013-5527 affects Cisco IOS and IOS XE OSPF implementations, specifically the OSPF opaque LSA (type 11) handling. The root cause is improper parsing of certain options in OSPF LSA type 11 packets, which can be exploited remotely by an unauthenticated attacker to trigger a de...

CVE-2013-5527

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

SuSE 11.2 / 11.3 Security Update : quagga (SAT Patch Numbers 8234 / 8235)

This update of quagga fixes two security issues : - specially crafted OSPF packets could have caused the routing table to be erased. bnc822572. CVE-2013-0149 - local network stack overflow bnc828117. CVE-2013-2236 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Check Point response to OSPF LSA spoofing vulnerability (CVE-2013-0149, CVE-2013-7311)

...

OSPF LSA Manipulation Vulnerability in Cisco ASA (cisco-sa-20130801-lsaospf)

The remote Cisco ASA device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could be exploited by injecting specially crafted OSPF packets. Successful exploitation could allow an unauthenticated...

OSPF LSA Manipulation Vulnerability in Cisco IOS XE (cisco-sa-20130801-lsaospf)

The remote Cisco IOS XE device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. A remote, unauthenticated attacker can exploit this vulnerability, via specially crafted OSPF packets, to manipulate or disrupt the flo...

OSPF LSA Manipulation Vulnerability in Cisco IOS (cisco-sa-20130801-lsaospf)

The remote Cisco IOS device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could be exploited by injecting specially crafted OSPF packets. Successful exploitation could allow an unauthenticated...

OSPF LSA Manipulation Vulnerability in Cisco NX-OS (cisco-sa-20130801-lsaospf)

The remote Cisco NX-OS device is affected by a vulnerability involving the Open Shortest Path First OSPF routing protocol Link State Advertisement LSA database. By injecting specially crafted OSPF packets, an unauthenticated attacker could manipulate or disrupt the flow of network traffic through...

Cisco OSPF LSA Manipulation Denial of Service (CVE-2013-0149)

A denial of service vulnerability has been reported in Multiple Cisco Products...

CVE-2013-4806

The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...

Information disclosure

The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...