Buffer Overflow

Quagga is vulnerable to stack-based buffer overflow attacks. When a certain VPNv4 configuration is used a remote attacker may crash Quagga BGP routing daemon bgpd which leads to denial of service DoS...

CVE-2016-2342

The bgpnlriparsevpnv4 function in bgpmplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a...