CVE-2012-0249

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in
the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote
attackers to cause a denial of service (assertion failure and daemon exit)
via a Link State Update (aka LS Update) packet that is smaller than the
length specified in its header.

Bugs

• <https://bugzilla.quagga.net/show_bug.cgi?id=705&gt;