Every CVE Search/ Get API key

CVE-2012-0249

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2...

3.3 Low

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Exploit likelihood

1.80%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.3

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Record
CVE-2012-0249
CVSS 2.0
3.3 LowAV:A/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Record
CVE-2012-0249
Updated
2026-11-02
EUVDEUVD-2012-0285 No score

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Record
EUVD-2012-0285
Updated
2026-11-03
GitHub AdvisoriesGHSA-x6mq-qm3w-f3w3 No score

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2...

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Record
GHSA-x6mq-qm3w-f3w3
Weakness
CWE-119
Updated
2026-11-02
OSVAZL-44544 No score

CVE-2012-0249 affecting package quagga 1.2.4-16

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Record
AZL-44544
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
quagga
Azure Linux:3
 through 1.2.4-16 None known
quagga
Debian:6.0
From an advisory covering 3 CVEs
 before 0.99.20.1-0+squeeze1, plus listed versions
0.99.17-20.99.17-2+squeeze20.99.17-2+squeeze30.99.17-30.99.17-4
Show 8 moreShow less
0.99.18-10.99.18-20.99.19-10.99.20-10.99.20-1~bpo60+10.99.20-20.99.20-30.99.20-4
0.99.20.1-0+squeeze1
quagga
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga-contrib
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga-contrib
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
Show 10 moreShow less
Affected packages
PackageAffectedFixed
quagga-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:0.98.6-7.el5_8.1
0:0.98.6-7.el5_8.1
quagga
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2
quagga-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2
quagga-contrib
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2
quagga-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2
quagga
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2
quagga-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2
quagga-contrib
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2
quagga-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
 before 0:0.99.15-7.el6_3.2
0:0.99.15-7.el6_3.2

History

History
RecordedChangedSources
affected, facts
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0249 is a low vulnerability (CVSS 3.3) in Quagga, published April 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. No source names a fixed version.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open