Lucene search
Ubuntu.comUB:CVE-2013-2236HistoryOct 23, 2013 - 12:00 a.m.
CVE-2013-2236
2013-10-2300:00:00
ubuntu.com
ubuntu.com
9
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
0.053 Low
EPSS
Percentile
93.0%
Stack-based buffer overflow in the new_msg_lsa_change_notify function in
the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when
–enable-opaque-lsa and the -a command line option are used, allows remote
attackers to cause a denial of service (crash) via a large LSA.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | requires --enable-opaque-lsa during the build (true for Ubuntu 10.04 LTS and higher) also requires starting ospfd with ‘-a’. ospfd is not enabled by default and the configuration in /etc/quagga/debian.conf does not include ‘-a’. Per upstream, normal protection measures (eg, packet filtering, listening on internal network, etc) would prevent this. Furthermore, it is difficult to exploit. Considering the above, downgrading to ‘low’ |
Related
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:15:58
cve
cve
CVE-2013-2236
2013-10-24 03:48:00
debiancve
debiancve
CVE-2013-2236
2013-10-24 03:48:00
prion
prion
Stack overflow
2013-10-24 03:48:00
nessus
nessus
Mandriva Linux Security Advisory : quagga (MDVSA-2013:254)
2013-10-20 00:00:00
Quagga < 0.99.22.2 OSPF API Buffer Overflow
2013-11-05 00:00:00
mageia
mageia
Updated quagga packages fix CVE-2013-2236
2013-10-17 23:40:12
osv
osv
quagga - several
2013-11-26 00:00:00
openvas
openvas
Ubuntu Update for quagga USN-2941-1
2016-03-25 00:00:00
Debian Security Advisory DSA 2803-1 (quagga - several vulnerabilities)
2013-11-26 00:00:00
Debian Security Advisory DSA 2803-1 (quagga - several vulnerabilities)
2013-11-26 00:00:00
securityvulns
securityvulns
quagga security vulnerabilities
2013-12-01 00:00:00
[SECURITY] [DSA 2803-1] quagga security update
2013-12-01 00:00:00
debian
debian
[SECURITY] [DSA 2803-1] quagga security update
2013-11-26 16:13:10
ubuntu
ubuntu
Quagga vulnerabilities
2016-03-24 00:00:00
gentoo
gentoo
Quagga: Multiple vulnerabilities
2013-10-10 00:00:00
redhat
redhat
(RHSA-2017:0794) Moderate: quagga security and bug fix update
2017-03-21 06:17:51
centos
centos
quagga security update
2017-03-24 15:42:29
oraclelinux
oraclelinux
quagga security and bug fix update
2017-03-27 00:00:00
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
0.053 Low
EPSS
Percentile
93.0%
Related for UB:CVE-2013-2236